GO-2025-3999

Privilege Escalation via WebSocket Connection Hijacking in Operations API in github.com/canonical/lxd

En bref

Publiée: 2025-11-05 18:41 UTC
Mise à jour: 2025-11-05 19:57 UTC
CVE: CVE-2025-54289
Alias: GHSA-3g72-chj4-2228

Description

Privilege Escalation via WebSocket Connection Hijacking in Operations API in github.com/canonical/lxd

Paquets affectés

Paquet	Versions
Go · github.com/canonical/lxd	introduced 0

Références

https://github.com/canonical/lxd/security/advisories/GHSA-3g72-chj4-2228 ADVISORY

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — Go Vulnerability Database