Critical Vulnerability in Prosody Modules for Ubuntu Users
A critical vulnerability in Prosody Community Modules affects Ubuntu 16.04 and 18.04 LTS users, allowing remote attackers to gain admin privileges. A patch is available.
OffSet7 Newsroom · Reviewed by an OffSet7 analyst · AI-assisted
What happened
A vulnerability in the LDAP authentication modules of Prosody Community Modules allows remote attackers to gain administrator privileges.
Who is affected
Users of Ubuntu 16.04 LTS and 18.04 LTS who utilize these modules.
Exploited
None reported.
What to do
Update systems to the latest package versions and restart Prosody after applying the patch.
A critical vulnerability has been identified in the LDAP authentication modules of Prosody Community Modules. The flaw allows remote attackers to gain administrator privileges.
The vulnerability affects users operating on Ubuntu 16.04 LTS and 18.04 LTS who utilize these specific modules. The issue has been documented under the Ubuntu Security Notice USN-9056-1.
The vulnerability was disclosed on November 11, 2026, and has been classified as critical.
A patch addressing this vulnerability is available, and affected users are strongly urged to update their systems to the latest package versions provided by Ubuntu Pro. Users must restart Prosody after applying the update to ensure the changes take effect.
Sources
Ubuntu: USN-9056-1: Prosody Community Modules vulnerability
