{
  "cveId": "CVE-2025-54289",
  "url": "https://patchblox.com/security/cve/CVE-2025-54289",
  "summary": "CVE-2025-54289 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2025-54289, released October 2, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "incus: Privilege Escalation in operations API in Canonical LXD \u003C6.5 on multiple platforms allows attacker with read permissi...",
  "description": "Privilege Escalation in operations API in Canonical LXD \u003C6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format",
  "published": "2025-10-02T10:15:39Z",
  "severity": "high",
  "cvss": 8.1,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
  "epss": 0.00212,
  "epssPercentile": 0.11566,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "govulncheck-vulndb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "0.0.20260723T184607-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21483-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21483-1",
      "released": "2026-07-30T09:09:47Z"
    },
    {
      "platform": "linux",
      "product": "incus",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.4-2\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2025-54289",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-54289",
      "released": "2025-10-02T10:15:39Z"
    },
    {
      "platform": "linux",
      "product": "incus",
      "release": "Debian 14",
      "fixedVersion": "6.0.5-1",
      "fix": "DEBIAN-CVE-2025-54289",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-54289",
      "released": "2025-10-02T10:15:39Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}