Threats tagged 'ghsa-3g72-chj4-2228'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.4	EPSS 0.2%	CVE-2025-54289github.com/canonical/lxd · Canonical LXD Vulnerable to Privilege Escalation via WebSocket Connection Hijacking in Operations API High7.4EPSS 0.2%2025-10-02GCVE DatabaseCVE-2025-54289 A vulnerability in Canonical LXD's operations API allows attackers with read-only permissions to hijack WebSocket connections used for terminal and console sessions. By exploiting secret values exposed in the API, attackers can execute arbitrary commands inside instances with the victim's privileges. The attack requires precise timing and the victim to open a terminal or console session. Fixes are available in LXD versions 5.21.4 and 6.5. EPSS 0.2%Report on CVE-2025-54289 Vulnerability CWE-1385 #ghsa-3g72-chj4-2228 #go	GCVE Database	2025-10-02

Page 1 of 1