Advisory Database
  • Advisories
  • Dependency Scanning
  1. golang
  2. ›
  3. github.com/canonical/lxd
  4. ›
  5. CVE-2025-54288

CVE-2025-54288: Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server

October 2, 2025

In LXD’s devLXD server, the source container identification process uses process cmdline (command line) information, allowing attackers to impersonate other containers by spoofing process names.

The core issue lies in the findContainerForPID function in lxd/api_devlxd.go. This function identifies senders through two steps as shown below:

  1. cmdline-based identification: Check while tracing back through parent processes, and if it starts with [lxc monitor], extract the project name and container name from that process name in the format projectName_containerName.
  2. PID namespace-based identification: If not found in Step 1, check against all containers’ PID namespaces.

https://github.com/canonical/lxd/blob/43d5189564d27f6161b430ed258c8b56603c2759/lxd/api_devlxd.go#L166-L276

Attackers can exploit Step 1 processing to impersonate arbitrary containers across projects by spoofing process names.

References

  • github.com/advisories/GHSA-7232-97c6-j525
  • github.com/canonical/lxd
  • github.com/canonical/lxd/security/advisories/GHSA-7232-97c6-j525
  • nvd.nist.gov/vuln/detail/CVE-2025-54288

Code Behaviors & Features

Detect and mitigate CVE-2025-54288 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions starting from 4.0 before 5.21.4, all versions starting from 6.0 before 6.5

Fixed versions

  • 5.21.4
  • 6.5

Solution

Upgrade to versions 5.21.4, 6.5 or above.

Impact 4.1 MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

Learn more about CVSS

Weakness

  • CWE-290: Authentication Bypass by Spoofing

Source file

go/github.com/canonical/lxd/CVE-2025-54288.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Tue, 07 Oct 2025 00:19:07 +0000.