Critical · 1 source · latest 2d

Critical certificate-validation flaws in Incus and LXD allow unauthenticated cluster takeover

CRITICAL · VULNERABILITYIncusredteam/daily · 1 source

Severity: Critical
Sources: 1

What happened

Two popular systems for running virtual machines and containers, Incus and Canonical LXD, have serious flaws. An attacker on the network could pretend to be a trusted party and take control of the management systems without needing a password.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

Check vendor advisories for Incus and LXD and apply the fixed versions once they are confirmed.
Restrict network access to the HTTPS management listener to trusted hosts only.

Written by AI from the sources, checked against them

Read the full story at the source