GO-2025-3999

Privilege Escalation via WebSocket Connection Hijacking in Operations API in github.com/canonical/lxd

At a glance

Published: 2025-11-05 18:41 UTC
Updated: 2025-11-05 19:57 UTC
CVE: CVE-2025-54289
Aliases: GHSA-3g72-chj4-2228

Description

Privilege Escalation via WebSocket Connection Hijacking in Operations API in github.com/canonical/lxd

Affected packages

Package	Versions
Go · github.com/canonical/lxd	introduced 0

References

https://github.com/canonical/lxd/security/advisories/GHSA-3g72-chj4-2228 ADVISORY

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — Go Vulnerability Database