CVE-2025-54287

6.5MEDIUM

Template Injection in instance snapshot creation component in Canonical LXD (>= 4.0) allows an attacker with instance configuration permissions to read arbitrary files on the host system via speciall

公開日: 10/2/2025更新日: 10/22/2025
NVDで表示MITREで表示

説明

Template Injection in instance snapshot creation component in Canonical LXD (>= 4.0) allows an attacker with instance configuration permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine.

AI分析AIによる分析

影響を受ける製品

canonicallxd
canonicallxd
linuxlinux_kernel
-

参照