← CVE Intelligence

CVE-2025-54286

CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI PUBLISHED

Description (CNA)

Cross-Site Request Forgery (CSRF) in LXD-UI in Canonical LXD versions >= 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTML form submissions exploiting client certificate authentication.

Affected (CNA)

Vendor / productVersions
Canonical / LXDaffected 5.0 before 5.0.5; affected 5.21 before 5.21.4; affected 6.0 before 6.5

CWE

CWE-352

References

ADP enrichment

CISA-ADP

No English description supplied.