CVE-2025-54293

MEDIUM

Canonical LXD 5.0 LTS - Authenticated Path Traversal via Log File Retrieval

Title source: llm

Description

Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on Linux allows authenticated remote attackers to read arbitrary files on the host system via crafted log file names or symbolic links.

References (1)

Core 1

Core References

Exploit, Vendor Advisory

https://github.com/canonical/lxd/security/advisories/GHSA-472f-vmf2-pr3h

Scores

CVSS v3 6.5

EPSS 0.0008

EPSS Percentile 24.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-22

Status published

Products (2)

canonical/lxd 4.0 - 5.21.4Go

canonical/lxd 4.0.0 - 5.21.4

Published Oct 02, 2025

Tracked Since Feb 18, 2026