Security Advisory

CVE-2025-54286

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-02 09:12:49

Last updated 2026-02-26 17:48:23

Assigner canonical

State PUBLISHED

Description

Cross-Site Request Forgery (CSRF) in LXD-UI in Canonical LXD versions >= 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTML form submissions exploiting client certificate authentication.

← Browse all CVEs View on cve.org ↗