SUSE CVE-2026-3351

Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server...

CVE-2026-3351

creationtimestamp| type| source ---|---|--- 2026-03-03 12:54:05+00:00| published-proof-of-concept| https://github.com/canonical/lxd/security/advisories/GHSA-crmg-9m86-636r 2026-03-03 16:19:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg66d5ziry2v 2026-03-04 20:40:05+00:00| see...