CVE-2025-54288 - CVE House
Back to Database
Status published Medium CVE-2025-54288

Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server

Vulnerability Description

Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the command line.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54288

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • GMO Flatt Security Inc.

References

More from Canonical

View All →
CVE-2025-6966
Null-pointer dereference in python-apt TagSection.keys()
Medium 6.9
CVE-2025-6224
Key leakage in juju/utils certificates
Medium 6.5
CVE-2025-5689
Improper Permission Management in SSH Session Handling
High 8.5
CVE-2025-5467
Ubuntu Apport Insecure File Permissions Vulnerability
Low 1.9
CVE-2025-5199
LPE on Multipass for macOS
High 7.3

Affected Vendor

Affected Software

LXD
Vulnerable Versions:
6.0, 5.21

Timeline

Official Publish: October 2nd, 2025
Last Modified: October 2nd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-290

MITRE ATT&CK TTPs

T1557 Adversary-in-the-Middle
Collection
T1078 Valid Accounts
Persistence
T1550 Use Alternate Authentication Material
Defense Evasion
T1021 Remote Services
Lateral Movement
T1190 Exploit Public-Facing Application
Initial Access