Vulnerability fixed in Canonical LXD

Canonical fixed a vulnerability in LXD that enables unauthenticated attackers with network access to the HTTPS API and the public certificate of a trusted client to impersonate that client. Successful exploitation may provide unauthorized access to the LXD cluster and managed virtual machines and, where the client has sufficient administrative privileges, may ultimately lead to root access on the underlying host.