Cyber ·
USN-8892-1: Ubuntu Pro for WSL token exposed in command line arguments
Ubuntu security notice: the Ubuntu Pro for WSL attach token appeared in command line arguments when enabling a subscription, potentially exposing confidential information and access to Ubuntu Pro repositories.
Notice USN-8892-1, published on October 6, 2026 in the Ubuntu Security feed, describes a vulnerability in Ubuntu Pro for WSL. When enabling a subscription on a WSL instance, the attach token was exposed in command line arguments. According to the text, an independent researcher identified the flaw. An attacker could possibly use the issue to obtain confidential information and gain unauthorized access to Ubuntu Pro repositories. The available content is a machine translation and does not state affected versions or fixed packages; that information is in the official Ubuntu notice. To verify, open the original notice through Ubuntu's security channel, check the listed versions, and apply the recommended updates. Relevance: the case shows that secrets passed as arguments can appear in process listings and terminal history. Rota Nacional does not patch third-party systems and does not solve this engineering problem.
Original source: USN-8892-1: vulnerabilidade no Ubuntu Pro para WSL