CVE-2025-54287

6.5MEDIUM

Template Injection in instance snapshot creation component in Canonical LXD (>= 4.0) allows an attacker with instance configuration permissions to read arbitrary files on the host system via speciall

发布于: 10/2/2025更新于: 10/22/2025
在NVD查看在MITRE查看

描述

Template Injection in instance snapshot creation component in Canonical LXD (>= 4.0) allows an attacker with instance configuration permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine.

AI分析AI驱动

受影响产品

canonicallxd
canonicallxd
linuxlinux_kernel
-

参考资料