UpHeron
All vulnerabilities

Servers and applications

CVE-2025-54293

Path Traversal Vulnerability in Instance Log File Retrieval Function

Severity
High 7.1
Published
2 Oct 2025
Last changed
12 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
5.21.0, 5.21.4, 6.5
Also known as
GHSA-472f-vmf2-pr3h
Sources
NVD, Project advisories (GitHub)

Description

Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on Linux allows authenticated remote attackers to read arbitrary files on the host system via crafted log file names or symbolic links.

Affected software

SoftwareAffected versions
LXDServers and applications · cpe:a:canonical:lxd
  • From 4.0.0 before 5.21.4
  • From 6.0 before 6.5
LXDServers and applications · github:canonical/lxd
  • From 4.0 before 5.21.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-54293
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-54293
  • GitHub Advisory Database https://github.com/advisories/GHSA-472f-vmf2-pr3h
  • github.com https://github.com/canonical/lxd/security/advisories/GHSA-472f-vmf2-pr3h