Go/github.com/canonical/lxd CVE-2025-54288: medium 6.8, EPSS 0.35%
Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server in github.com/canonical/lxd
Action: Upgrade github.com/canonical/lxd to 0.0.0-20250827065555-0494f5d47e41 or later.
go get github.com/canonical/lxd@v0.0.0-20250827065555-0494f5d47e41Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-20200331193331-03aab09f5b5c | 0.0.0-20250827065555-0494f5d47e41 | - |
Fixed versions
| 0.0.0-20250827065555-0494f5d47e41 |
Sources
- osv: GO-2025-4001
- nvd: CVE-2025-54288
- https://github.com/canonical/lxd/security/advisories/GHSA-7232-97c6-j525
CVE-2025-54288 · published · modified · JSON