CVE-2025-54289 - CVE House
Back to Database
Status published High CVE-2025-54289

Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API

Vulnerability Description

Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54289

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • GMO Flatt Security Inc.

References

More from Canonical

View All →
CVE-2025-6966
Null-pointer dereference in python-apt TagSection.keys()
Medium 6.9
CVE-2025-6224
Key leakage in juju/utils certificates
Medium 6.5
CVE-2025-5689
Improper Permission Management in SSH Session Handling
High 8.5
CVE-2025-5467
Ubuntu Apport Insecure File Permissions Vulnerability
Low 1.9
CVE-2025-5199
LPE on Multipass for macOS
High 7.3

Affected Vendor

Affected Software

LXD
Vulnerable Versions:
6, 5.21

Timeline

Official Publish: October 2nd, 2025
Last Modified: February 26th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-1385

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.