The Hacker News · 11/1/2026

CVSS 10.0 LXD and MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without Private Key

Critical authentication bypass in Canonical's LXD/MicroCloud allows unauthenticated impersonation of trusted clients, granting cluster and VM access with only public certificate knowledge.

Read original coverage