CVE-2025-54289
Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format
| Software | From | Fixed in |
|---|---|---|
github.com/canonical/lxd
|
4.0 | 5.21.4 |
|
github.com/canonical/lxd
|
6.0 | 6.5 |
|
github.com/canonical/lxd
|
0.0.0-20200331193331-03aab09f5b5c | 0.0.0-20250827065555-0494f5d47e41 |
| canonical / lxd | 4.0.0 | 5.21.4 |
| canonical / lxd | 6.1 | 6.5 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime