Cross-Site Request Forgery in LXD-UI by Canonical

CVE-2025-54286

What is CVE-2025-54286?

The LXD-UI interface in Canonical's LXD versions 5.0 and above is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. This flaw enables an attacker to initiate and manage container instances without the user's consent by sending maliciously crafted HTML form submissions that exploit client certificate authentication processes. It underscores the importance of implementing robust security measures to safeguard against unauthorized actions in containerized environments.

References