A vulnerability in Canonical's Pebble service manager read-file API and the associated pebble pull command before version 1.10.2 allows unprivileged local users to read files with root-equivalent permissions when Pebble is running as root. Fixes are available in version 1.10.2 and backported to versions 1.1.1, 1.4.2, and 1.7.4. This issue affects multiple version ranges prior to these fixed versions.