Alerts This Week
Warning Icon 1 975
Alerts This Week
Warning Icon 1 975

Ubuntu 26.04 Luanti Important Code Execution Issues USN 8366-1

ubuntu
Calendar Grey June 2, 2026
Dist Ubuntu Esm H88
Critical fixes for Luanti in Ubuntu 26.04 and 25.10 target arbitrary code execution and access issues.
Several security issues were fixed in Luanti.

Summary

Several security issues were fixed in Luanti.

Software Description:

- luanti: free and open-source voxel game engine

Details:

It was discovered that Luanti, when using LuaJIT, did not properly

enforce Lua sandbox restrictions. An attacker could possibly use

this issue to execute arbitrary code. (CVE-2026-40959)

It was discovered that Luanti did not properly restrict access to

insecure environments. An attacker could possibly use this issue to

obtain unintended access to the insecure environment or HTTP API.

(CVE-2026-40960)

Topics%20covered

Topics Covered

security advisory security issue arbitrary code execution Ubuntu important HTTP API access

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  luanti                          5.10.0+dfsg-5+deb13u1build0.26.04.1
  luanti-data                     5.10.0+dfsg-5+deb13u1build0.26.04.1
  luanti-server                   5.10.0+dfsg-5+deb13u1build0.26.04.1

Ubuntu 25.10
  luanti                          5.10.0+dfsg-5+deb13u1build0.25.10.1
  luanti-data                     5.10.0+dfsg-5+deb13u1build0.25.10.1
  luanti-server                   5.10.0+dfsg-5+deb13u1build0.25.10.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8366-1

CVE-2026-40959, CVE-2026-40960

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8366-1

Topics%20covered

Topics Covered

security advisory security issue arbitrary code execution Ubuntu important HTTP API access

Package Information

https://launchpad.net/ubuntu/+source/luanti/5.10.0+dfsg-5+deb13u1build0.26.04.1
https://launchpad.net/ubuntu/+source/luanti/5.10.0+dfsg-5+deb13u1build0.25.10.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here