GO-2025-4003

vendorUSosv

CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI in github.com/canonical/lxd

view advisory published 2025-11-05Licence: per source

CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI in github.com/canonical/lxd

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-54286UShigh8.8—
Cross-Site Request Forgery (CSRF) in LXD-UI in Canonical LXD versions >= 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HT…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan