PT-2025-40340 · Canonical+2 · Lxd+2

Published 2025-10-02 · Updated 2025-12-10 · CVE-2025-54293

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Canonical LXD version 5.0 LTS

Description An issue exists in the log file retrieval function that allows authenticated remote attackers to read arbitrary files on the host system. This occurs through crafted log file names or symbolic links. The affected function is the log file retrieval function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-54293

DSA-6027-1

DSA-6028-1

GHSA-472F-VMF2-PR3H

GO-2025-4000

OPENSUSE-SU-2025:15710-1

Affected Products

Debian

Lxd

Red Os

References · 94

• 🔥 https://github.com/canonical/lxd/security/advisories/GHSA-472f-vmf2-pr3h · Exploit
• https://osv.dev/vulnerability/GO-2025-4000 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-54293 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-54293 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15710-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54293 · Security Note
• https://osv.dev/vulnerability/CVE-2025-54293 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-54293 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-54293 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-472f-vmf2-pr3h · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-54293 · Security Note
• https://osv.dev/vulnerability/DSA-6028-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-6027-1 · Vendor Advisory
• https://github.com/canonical/lxd · Note
• https://github.com/canonical/lxd/pull/15022 · Note