CVE-2025-54293 — Path Traversal in LXD Instance Log File Retrieval

Back Back to CVE browser

HIGH

Path Traversal in LXD Instance Log File Retrieval

Published Oct 2, 2025

7.1

HIGH

CVSS 4.0

EPSS 0.58%

Description

Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on Linux allows authenticated remote attackers to read arbitrary files on the host system via crafted log file names or symbolic links.

Affected products

Vendor Canonical Product LXD Default
unaffected
- Version
  5.21
  Status
  affected
  Constraints
  <5.21.4
- Version
  6.0
  Status
  affected
  Constraints
  <6.5

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Canonical

LXD

unaffected

Version	Status	Constraints
5.21	affected	<5.21.4
6.0	affected	<6.5

github.com/canonical/lxd

Go

Introduced 0.0.0-20200331193331-03aab09f5b5c Fixed 0.0.0-20250224180022-ec09b24179f3

Ecosystem	Package	Introduced	Fixed
Go	github.com/canonical/lxd	0.0.0-20200331193331-03aab09f5b5c	0.0.0-20250224180022-ec09b24179f3

Remediation

No remediation recorded yet.

Metrics

0.58% 0.00580

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00580

Score over time

2025–2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (3 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.58% (0.00580)	45.68th	v5 (v2026.06.15)
Jun 15, 2026	0.53% (0.00525)	40.08th	v5 (v2026.06.15)
Oct 2, 2025	0.23% (0.00227)	45.56th	v4 (v2025.03.14)

Weaknesses (1)

CWE-22

Path Traversal

References (5)

Link	Providers	Tags
https://github.com/advisories/GHSA-472f-vmf2-pr3h		Advisory
https://github.com/canonical/lxd/pull/15022
https://github.com/canonical/lxd/security/advisories/GHSA-472f-vmf2-pr3h		exploitVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-54293
https://pkg.go.dev/vuln/GO-2025-4000