Go/github.com/lxc/lxd CVE-2025-54287: unknown, EPSS 0.38%

Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns in github.com/lxc/lxd

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2025-4004
• https://github.com/canonical/lxd/security/advisories/GHSA-w2hg-2v4p-vmh6

CVE-2025-54287 · published 2025-11-05T18:41:15Z · modified 2025-11-05T19:57:36.020117Z · JSON