Security Advisory

CVE-2025-54289

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-10-02 09:23:03
Last updated 2026-02-26 17:48:23
Assigner canonical
CVSS score 7.4
State PUBLISHED

Description

Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format