—
GO-2025-4001
Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server in github.com/canonical/lxd
Quick fix
GO-2025-4001 — github.com/canonical/lxd: upgrade to the fixed version with the command below.
go get github.com/canonical/lxd@v0.0.0-20250827065555-0494f5d47e41Details
Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server in github.com/canonical/lxd
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/canonical/lxd
Introduced in:
0.0.0-20200331193331-03aab09f5b5cFixed in: 0.0.0-20250827065555-0494f5d47e41Fix
go get github.com/canonical/lxd@v0.0.0-20250827065555-0494f5d47e41