Critical LXD and MicroCloud flaw lets attackers impersonate trusted clients
Canonical has released fixes for a CVSS 10.0 flaw in LXD and MicroCloud that can let an attacker log in as a trusted client without its private key. Administrators should update the products and restrict access to the HTTPS API until fixed versions are confirmed.