Critical LXD & MicroCloud flaw: CVE-2026-112816 (CVSS 10.0).
Patches are out. Update now!
https://thehackernews.com/2026/11/critical-lxd-and-microcloud-flaw-cvss.html
The Hacker NewsCVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private KeyCanonical patches CVE-2026-112816 in LXD and MicroCloud, a CVSS 10.0 flaw enabling trusted client impersonation without private keys.
commit 55d749a