Executive brief
Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server in github.com/canonical/lxd
Affected products
- Go github.com/canonical/lxd
Junglewise Threat Intelligence
CVE-2025-54288: GO-2025-4001 - Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server in github.com/canonical/lxd
CVE-2025-54288 · Severity: low · CVSS 3.1 · Published 2025-11-05
Technologies: github.com/canonical/lxd (Go). Vendors: Go.
Related threats
- Canonical LXD VM restriction bypass in isVMLowLevelOptionForbidden
- Canonical LXD project restriction bypass via crafted backup import
- Canonical LXD privilege escalation via certificate type modification
- GO-2026-4595 - Non-recursive certificate listing bypasses per-object authorization and leaks all fingerprints in github.com/canonical/lxd
- GO-2025-4121 - LXD vulnerable to a local privilege escalation through custom storage volumes in lxd in github.com/canonical/lxd