CRITICAL9.1CVE-2026-34178LXD: Importing a crafted backup leads to project restriction bypass >= 0.0.0-20210305023314-538ac3df036e, <= 0.0.0-20260226085519-736f34afb267
MEDIUM6.8CVE-2025-54289Privilege Escalation via WebSocket Connection Hijacking in Operations API in github.com/canonical/lxd >= 4.0, < 5.21.4
MEDIUM5.3CVE-2025-54290Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd >= 4.0, < 5.21.4
MEDIUM5.3Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd
>= 0.0.0-20200331193331-03aab09f5b5c, < 0.0.0-20250827065555-0494f5d47e41
MEDIUM5.3Canonical LXD Project Existence Determination Through Error Handling in Image Get Function in github.com/canonical/lxd
>= 4.0, < 5.21.4
MEDIUM5.3Canonical LXD Project Existence Determination Through Error Handling in Image Get Function in github.com/canonical/lxd
>= 0.0.0-20200331193331-03aab09f5b5c, < 0.0.0-20250827065555-0494f5d47e41
LOW3.8CA certificate sign check bypass in github.com/canonical/lxd
from 0, < 0.0.0-20240708073652-5a492a3f0036
LOW3.8CA certificate sign check bypass in github.com/canonical/lxd
from 0, < 0.0.0-20240708073652-5a492a3f0036
LOW3.8Restricted TLS certificate privilege escalation when in PKI mode in github.com/canonical/lxd
from 0, < 0.0.0-20240403103450-0e7f2b5bf4d2
LOW3.8Restricted TLS certificate privilege escalation when in PKI mode in github.com/canonical/lxd
from 0, < 0.0.0-20240403103450-0e7f2b5bf4d2
—Non-recursive certificate listing bypasses per-object authorization and leaks all fingerprints in github.com/canonical/lxd
from 0, < 0.0.0-20260224152359-d936c90d47cf
—Non-recursive certificate listing bypasses per-object authorization and leaks all fingerprints in github.com/canonical/lxd
from 0