CVE-2025-54289 | BDVDB-2026-296368 Detail
CanonicalLXD
Description#
Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format
Impact#
CAPEC-593 Session Hijacking
Weaknesses#
- CWE-1385 Missing Origin Validation in WebSockets
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.