VULNERABILITY INTELLIGENCE

CVE-2025-54290

CVSS score5.3 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2025-10-02
Last modified2026-10-12
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without authentication via crafted requests using wildcard fingerprints.

Weakness classification

  • security@ubuntu.com: CWE-200
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references