Information Disclosure in Canonical LXD Images API
CVE-2025-54291
6.9MEDIUM
What is CVE-2025-54291?
The information disclosure vulnerability in the images API of Canonical LXD versions prior to 6.5 and 5.21.4 permits unauthenticated remote attackers to ascertain the existence of projects. This is achieved through variations in the HTTP status codes returned, which can inadvertently reveal sensitive information regarding project configurations and availability.
Affected Version(s)
LXD 6.0 < 6.5
LXD 5.21 < 5.21.4