CVE-2026-3351
Authorization Bypass in LXD GET /1.0/certificates Endpoint
Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.
CVSS 4.0 · 2.1 Low
EPSS < 1%
KEV · Not listed
Vendors
Products