PT-2025-40335

CVE-2025-54292

·

Published

2025-10-02

·

Updated

2026-10-12

Description by

CVSS 4.0
4.8
Medium
MetricsAV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Canonical LXD LXD-UI versions prior to 6.5 Canonical LXD LXD-UI versions prior to 5.21.4
Description A path traversal issue exists in Canonical LXD LXD-UI. Remote authenticated attackers can potentially access or modify unintended resources by using crafted resource names within URL paths.
Recommendations Update LXD-UI to version 6.5 or later. Update LXD-UI to version 5.21.4 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2025-54292
GHSA-7425-4QPJ-V4W3
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com