Canonical, the company behind the Ubuntu operating system, released a fix for a critical flaw in two infrastructure management products: LXD, a tool for managing containers and virtual machines, and MicroCloud, used to set up small private clouds. According to The Hacker News, the flaw, CVE-2026-112816, received the maximum severity score of 10.0.
What the flaw allows
According to the report, an attacker can impersonate a trusted client of the system without holding its private key, in other words bypass authentication. In systems that manage virtual machines and containers, such access could give control over all the servers managed through them.
Who should worry
Organizations using LXD or MicroCloud, mainly DevOps and infrastructure teams running private clouds on Ubuntu, should update to the fixed versions immediately. The flaw also appears in The Hacker News weekly recap alongside other critical flaws, including in WatchGuard, Apache Tomcat and Langflow.
The trend
Flaws in infrastructure management tools are especially dangerous because they give attackers "the keys to the kingdom". In an era when AI speeds up the discovery and exploitation of flaws, the time between a fix and real attacks is shrinking, and updating fast matters.
