VulnerabilitiesCanonical patches a 10-out-of-10 LXD flaw that let strangers walk in as trusted admins
A certificate-checking mistake in LXD and MicroCloud let anyone who could reach the API log in as someone else. Canonical shipped fixes on October 28.