CVE-2013-1057: Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to exe...

Security readout for executives and security teams

CVE-2013-1057 affects older Ubuntu MAAS releases before 13.10. A local user could cause a MAAS PXE import utility to load a malicious configuration file from the current directory, leading to arbitrary code execution. This is mainly a risk on legacy MAAS hosts with local user access or unsafe operational workflows. Exposure is most likely limited to legacy MAAS deployments older than 13.10, especially systems where non-administrative local users can access the host or influence where the import utility runs. Treat this as a legacy infrastructure hygiene issue. It warrants remediation if old MAAS systems remain in service, but the business urgency is lower than internet-facing remote-code-execution issues because sources only support a local-user attack path. Mitigation focus: Upgrade MAAS to 13.10 or a later vendor-supported release.; Review Ubuntu USN-2013-1 for the applicable fixed package guidance.; Restrict local shell access on MAAS hosts to trusted administrators..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.