CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

A critical authentication bypass vulnerability, tracked as CVE-2026-112816 with a maximum CVSS score of 10.0, affects Canonical's LXD and MicroCloud services. The flaw stems from improper certificate validation during mutual TLS handshakes, allowing attackers with network access to the HTTPS API and a trusted client's public certificate to impersonate authenticated users. Exploitation grants full access to virtual machine clusters and potentially root access to host machines. Canonical has released patched versions via snap to remediate the vulnerability.

Source: The Hacker News

How Mangudai Discovers This Issue

Mangudai's port and service scanning module identifies open HTTPS ports and analyzes service banners or API endpoints associated with LXD and MicroCloud exposed on the external perimeter.

Continuous Autonomous AuditsMangudai scans target perimeters multiple times daily to catch configuration drift instantly.

Zero-Agent ArchitectureIdentifies exposure angles without requiring local installations or server access.

Check what your own domain exposes

A free scan lists the services, software versions, certificates and headers your domain shows to the internet, so you can see whether a flaw like this could apply to you. It reads what is visible from the outside; it does not confirm that a specific vulnerability can be exploited.

Launch Scan For My Domain