Security Advisory
CVE-2026-3351
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.