---
id: CVE-2025-54293
title: >-
  Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on
  Linux allows authenticated remote attackers to read arbitrary files on the
  host system via crafted log file names or symbolic links.
summary: >-
  Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on
  Linux allows authenticated remote attackers to read arbitrary files on the
  host system via crafted log file names or symbolic links.
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-22
vendor: canonical
product: lxd
affected:
  - 'lxd >= 4.0.0, < 5.21.4'
  - 'lxd >= 6.0, < 6.5'
patched:
  - lxd 6.5
published: '2025-10-02'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T15:10:00.207'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-54293'
references:
  - url: 'https://github.com/canonical/lxd/security/advisories/GHSA-472f-vmf2-pr3h'
    label: security@ubuntu.com
  - url: 'https://github.com/canonical/lxd/security/advisories/GHSA-472f-vmf2-pr3h'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-54293'
  - url: 'https://github.com/canonical/lxd/pull/15022'
  - url: 'https://github.com/canonical/lxd'
  - url: 'https://pkg.go.dev/vuln/GO-2025-4000'
tags:
  - nvd
  - osv
  - go
epss: 0.00594
epssPercentile: 0.48162
aliases:
  - GHSA-472f-vmf2-pr3h
  - GO-2025-4000
ecosystem: go
ingestedAt: '2026-07-09T18:56:35.887Z'
---

## Overview

Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on Linux allows authenticated remote attackers to read arbitrary files on the host system via crafted log file names or symbolic links.

## Affected

- `lxd >= 4.0.0, < 5.21.4`
- `lxd >= 6.0, < 6.5`

## Remediation

Upgrade past the affected range:

- `lxd 6.5`

## Package advisory (CVE-2025-54293)

Affected packages:

- `github.com/canonical/lxd >= 4.0, < 5.21.4`
- `github.com/canonical/lxd >= 6.0, < 6.5`
- `github.com/canonical/lxd >= 0.0.0-20200331193331-03aab09f5b5c, < 0.0.0-20250224180022-ec09b24179f3`

Patched in:

- `github.com/canonical/lxd 5.21.4`
- `github.com/canonical/lxd 6.5`
- `github.com/canonical/lxd 0.0.0-20250224180022-ec09b24179f3`

Source: https://osv.dev/vulnerability/GHSA-472f-vmf2-pr3h