Critical Vulnerability Found in Canonical's LXD and MicroCloud Software

A critical vulnerability (CVE-2026-112816) with a CVSS score of 10.0 has been identified in Canonical's LXD and MicroCloud. This flaw enables an attacker with network access and a trusted client's public certificate to impersonate that client, potentially gaining root access to the host machine. Canonical has since released fixed versions of both products, urging users to update immediately.