CVE-2025-54291

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing HTTP status code responses.

More information : https://github.com/canonical/lxd/security/advisories/GHSA-xch9-h8qw-85c7