Vulnerability Details CVE-2026-3351
Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.1%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2026-3351
-
cpe:2.3:a:canonical:lxd:6.6
-
cpe:2.3:o:linux:linux_kernel:-