Loading vulnerability details…
CVSS v3.1
6.8
CVSS v4.0
5.1
EPSS
0.33%
Published
Oct 2, 2025
Modified
Oct 24, 2025
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the command line.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:NWeaknesses (CWE)
Affected Products (3)
References (2)