Vulnerability Details CVE-2026-3351
Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 10.6%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2026-3351
-
cpe:2.3:a:canonical:lxd:6.6
-
cpe:2.3:o:linux:linux_kernel:-