GO-2025-4003

CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI in github.com/canonical/lxd

At a glance

Published: 2025-11-05 18:41 UTC
Updated: 2025-11-05 19:57 UTC
CVE: CVE-2025-54286
Aliases: GHSA-p8hw-rfjg-689h

Description

CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI in github.com/canonical/lxd

Affected packages

Package	Versions
Go · github.com/canonical/lxd	introduced 0

References

https://github.com/canonical/lxd/security/advisories/GHSA-p8hw-rfjg-689h ADVISORY

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — Go Vulnerability Database