Public bug reported:

**Title:** lastpass-cli 1.6.1 fails TLS certificate verification after
LastPass certificate rotation — update to 1.6.2 required

**Description:**

The version of `lastpass-cli` distributed through Ubuntu's official
repositories fails to authenticate following LastPass's October 2026
certificate rotation.

**Steps to reproduce:**

1. Install `lastpass-cli` from the Ubuntu repository.
2. Run `lpass login --trust [email protected]`.
3. Observe the TLS certificate verification failure.

**Actual result:**

```
Error: SSL peer certificate or SSH remote key was not OK.
```

**Expected result:**

LastPass CLI should successfully establish a secure TLS connection and
proceed with authentication.

**Cause:**

The older CLI uses certificate pinning that is incompatible with the
updated LastPass certificate.

**Proposed fix:**

Update the Ubuntu `lastpass-cli` package to upstream version 1.6.2 or
backport the relevant certificate verification fix.

**Impact:**

The packaged client is unable to authenticate, making it unusable for
affected Ubuntu users and automated workflows.

Upstream release: https://github.com/lastpass/lastpass-
cli/releases/tag/v1.6.2

** Affects: lastpass-cli (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2172140

Title:
  lastpass-cli 1.6.1 packaged in Ubuntu cannot authenticate since
  October 22, 2026 — requires 1.6.2 update

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lastpass-cli/+bug/2172140/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to