What is the CVSS score of CVE-2025-54287?

CVE-2025-54287 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Ubuntu are affected by CVE-2025-54287?

CVE-2025-54287 presents notable security risk rated CVSS 6.5. Exploitation could compromise the security of affected deployments. Proof-of-concept code is publicly available.. A patch is available.

Is there a public PoC exploit available for CVE-2025-54287?

Yes, a public proof-of-concept exploit is available for CVE-2025-54287. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-54287?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Ubuntu CVE-2025-54287

EUVD-2025-32636 MEDIUM

Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

2025-10-02 security@ubuntu.com

GHSA-w2hg-2v4p-vmh6

Code Injection Debian Ubuntu Lxd Suse

6.5

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 13, 2026 - 19:12 euvd

EUVD-2025-32636

Analysis Generated

Mar 13, 2026 - 19:12 vuln.today

PoC Detected

Oct 22, 2025 - 15:39 vuln.today

Public exploit code

CVE Published

Oct 02, 2025 - 10:15 nvd

MEDIUM 6.5

DescriptionNVD

Template Injection in instance snapshot creation component in Canonical LXD (>= 4.0) allows an attacker with instance configuration permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine.

AnalysisAI

A arbitrary file access vulnerability (CVSS 6.5) that allows an attacker with instance configuration permissions. Risk factors: public PoC available.

Technical ContextAI

Vulnerability type: arbitrary file access.

RemediationAI

Monitor vendor channels for patch availability.

More from same product – last 7 days

CVE-2026-9256 HIGH This Week

8.1 May 22

Heap buffer overflow in NGINX Plus and NGINX Open Source ngx_http_rewrite_module allows unauthenticated remote attackers

CVE-2026-47269 HIGH This Week

7.4 May 27

Authentication-context bypass in pam_usb before 0.9.0 lets a person holding an enrolled USB device authenticate over SSH

CVE-2026-47271 MEDIUM This Month

5.1 May 27

pam_usb prior to 0.9.0 crashes under memory pressure due to assert()-based OOM guards in src/mem.c that are silently str

CVE-2026-45898 Awaiting Data

May 27

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by removin

CVE-2026-45924 Awaiting Data

May 27

In the Linux kernel, the following vulnerability has been resolved: ksmbd: call ksmbd_vfs_kern_path_end_removing() on s

Vendor StatusVendor

Ubuntu

Priority: Medium

lxd

Release	Status	Version
jammy	DNE	-
noble	DNE	-
plucky	DNE	-
upstream	needs-triage	-
bionic	not-affected	code not present
focal	not-affected	installs LXD snap
xenial	not-affected	code not present
questing	DNE	-

Debian

incus

Release	Status	Fixed Version	Urgency
trixie	fixed	6.0.4-2+deb13u1	-
trixie (security)	fixed	6.0.4-2+deb13u4	-
forky, sid	fixed	6.0.5-8	-
(unstable)	fixed	6.0.5-1	-

lxd

Release	Status	Fixed Version	Urgency
bookworm	fixed	5.0.2-5+deb12u1	-
bookworm (security)	fixed	5.0.2-5+deb12u3	-
trixie	fixed	5.0.2+git20231211.1364ae4-9+deb13u1	-
trixie (security)	fixed	5.0.2+git20231211.1364ae4-9+deb13u3	-
(unstable)	fixed	(unfixed)	-

DSA-6027-1 DSA-6028-1

CVE-2025-54287 vulnerability details – vuln.today

Back

Ubuntu CVE-2025-54287

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More from same product – last 7 days

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code