Threats tagged 'ghsa-7232-97c6-j525'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.4%	CVE-2025-54288github.com/canonical/lxd · Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server Medium5.1EPSS 0.4%2025-10-02GCVE DatabaseCVE-2025-54288 CVE-2025-54288 is a vulnerability in Canonical LXD's devLXD server where the source container identification relies on process command line information. This allows attackers with root privileges inside a container to spoof process names and impersonate other containers, thereby accessing their metadata, configuration, and device information. The issue arises because the identification function trusts cmdline data without sufficiently verifying PID namespaces. Fixes are available in LXD versions 5.21.4 and 6.5. EPSS 0.4%Report on CVE-2025-54288 Vulnerability CWE-290 #ghsa-7232-97c6-j525 #go	GCVE Database	2025-10-02

Page 1 of 1