This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2025-54289 | BDVDB-2026-296368 Detail

CanonicalLXD

Description#

Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format

Impact#

CAPEC-593 Session Hijacking

Weaknesses#

  • CWE-1385 Missing Origin Validation in WebSockets

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.