HackFraudCritical LXD, MicroCloud Flaw Allows Client Impersonation Without Private Key
Published: 1 Nov 2026 · Worldwide
A severe vulnerability in Canonical's LXD and MicroCloud lets attackers impersonate trusted clients without their private keys by accessing the HTTPS API and using the client's public certificate. This grants unauthorized access to clusters and virtual machines.
Who is at risk
Users of Canonical's LXD and MicroCloud platforms
How to protect yourself
- Restrict network access to the HTTPS API to trusted sources only
- Monitor for unusual client authentication attempts
- Apply security patches from Canonical promptly
Source: The Hacker News (thehackernews.com)
Language: English Ελληνικά Español Français Deutsch Italiano Português Nederlands Polski Türkçe Русский العربية हिन्दी 中文 日本語