tocsin

Go/github.com/canonical/lxd CVE-2025-54289: medium 6.8, EPSS 0.21%

Canonical LXD Vulnerable to Privilege Escalation via WebSocket Connection Hijacking in Operations API

Action: Upgrade github.com/canonical/lxd to 0.0.0-20250827065555-0494f5d47e41 or later.

go get github.com/canonical/lxd@v5.21.4
go get github.com/canonical/lxd@v6.5
go get github.com/canonical/lxd@v0.0.0-20250827065555-0494f5d47e41

Affected

introducedfixedlast affected
4.05.21.4-
6.06.5-
0.0.0-20200331193331-03aab09f5b5c0.0.0-20250827065555-0494f5d47e41-

Fixed versions

5.21.46.50.0.0-20250827065555-0494f5d47e41

Sources

CVE-2025-54289 · published · modified · JSON