CVE-2026-3351

Authorization Bypass in LXD GET /1.0/certificates Endpoint

State: Published
Severity: 2.1 Low
Published: Mar 3, 2026
Updated: Mar 5, 2026
Reserved: Feb 27, 2026

Description

Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.

Scores

CVSS	Score	Vector	Source
4.0	2.1 Low	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:P	canonical

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
lxdCanonical	6.6Affected

References

https://github.com/canonical/lxd/security/advisories/GHSA-crmg-9m86-636rvdb-entryvendor-advisory
lxd/certificates: Return only allowed certificates in non-recursive listpatchissue-tracking
https://github.com/canonical/lxd/commit/d936c90d47cf0be1e9757df897f769e9887ebde1patch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.