Critical CVSS 10.0 Flaw in LXD and MicroCloud Allows Trusted Client Impersonation
A critical CVSS 10.0 vulnerability in Canonical's LXD and MicroCloud enables attackers to impersonate trusted clients using only the public certificate and access clusters and virtual machines via the HTTPS API.