A critical certificate validation flaw in LXD and Incus could let remote attackers bypass login checks and take control of clusters and managed virtual machines. The weakness affects the HTTPS management listener, placing exposed Linux systems at risk without requiring a password, stolen private key, or user interaction. Incus rates its flaw critical, with a […]
Read the original article:
Critical Certificate Validation Flaw in LXD and Incus Could Give Hackers Control of Linux Hosts
