tocsin

Go/github.com/lxc/lxd CVE-2025-54287: medium 6.5, EPSS 0.38%

Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns

Action: Upgrade github.com/lxc/lxd to 0.0.0-20250827065555-0494f5d47e41 or later.

go get github.com/lxc/lxd@v5.21.4
go get github.com/lxc/lxd@v6.5.0
go get github.com/lxc/lxd@v0.0.0-20250827065555-0494f5d47e41

Affected

introducedfixedlast affected
4.0.05.21.4-
6.0.06.5.0-
0.0.0-20200331193331-03aab09f5b5c0.0.0-20250827065555-0494f5d47e41-

Fixed versions

5.21.46.5.00.0.0-20250827065555-0494f5d47e41

Sources

CVE-2025-54287 · published · modified · JSON