CVE-2025-54287CWE-1336

CVE-2025-54287

Medium · published October 2, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
30.3
In the wild
Unconfirmed
What it is

Template Injection in instance snapshot creation component in Canonical LXD (>= 4.0) allows an attacker with instance configuration

permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00375 · 30.3th percentile
Weakness
CWE-1336 · Improper Neutralization of Special Elements Used in a Template Engine
Published
2025-10-02T14:15Z
Affected products (2)
ProductVersionsFixed in
canonical/lxd≥ 4.0.0, < 5.21.45.21.4
canonical/lxd≥ 6.1, < 6.56.5
References (2)
https://github.com/canonical/lxd/security/advisories/GHSA-w2hg-2v4p-vmh6 · [email protected]https://github.com/canonical/lxd/security/advisories/GHSA-w2hg-2v4p-vmh6 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 02 OCT 09:16Z
    Arbitrary File Read via Template Injection in Snapshot Patterns
    cvelistv5