Critical Security Flaw Affecting LXD and MicroCloud Disclosed

A critical vulnerability, CVE-2026-120345, with a maximum CVSS score of 10.0, has been disclosed, impacting LXD and MicroCloud. This flaw could allow attackers to impersonate trusted TLS clients and potentially gain root access to host machines. Canonical has released patched versions to address this severe security risk, urging users to update immediately to prevent potential system compromise.