Vulnerability · Published Oct 2, 2025 · Assigned by canonical
CVE-2025-54288Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server
Medium 5.1
In plain English
A medium-severity authentication bypass by spoofing in LXD from Canonical. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the command line.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.23 | incus | 6.0.6-r0 | ALPINE-CVE-2025-54288 |
| Alpine:v3.24 | incus | 6.0.6-r0 | ALPINE-CVE-2025-54288 |
| Debian:13 | incus | 6.0.4-2+deb13u1 | DEBIAN-CVE-2025-54288 |
| Debian:13 | incus | 6.0.4-2+deb13u1 | DSA-6027-1 |
| Debian:14 | incus | 6.0.5-1 | DEBIAN-CVE-2025-54288 |
| Debian:12 | lxd | 5.0.2-5+deb12u1 | DSA-6028-1 |
| Debian:12 | lxd | no fix listed | DEBIAN-CVE-2025-54288 |
| Debian:13 | lxd | 5.0.2+git20231211.1364ae4-9+deb13u1 | DEBIAN-CVE-2025-54288 |
| Debian:13 | lxd | 5.0.2+git20231211.1364ae4-9+deb13u1 | DSA-6028-1 |
| Go | github.com/canonical/lxd | 6.5 | GHSA-7232-97c6-j525 |
| Go | github.com/canonical/lxd | 0.0.0-20250827065555-0494f5d47e41 | GO-2025-4001 |
| Go | github.com/canonical/lxd | 5.21.4 | GHSA-7232-97c6-j525 |
| Go | github.com/canonical/lxd | 0.0.0-20250827065555-0494f5d47e41 | GHSA-7232-97c6-j525 |
Affected products (as reported)
Weakness: CWE-290 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N