Canonical patches CVE-2026-112816 in LXD and MicroCloud, a CVSS 10.0 flaw enabling trusted client impersonation without private keys.

MicroCloud is a platform for deploying and managing small private clouds. Developed by Canonical, it brings together virtualisation, distributed storage and software-defined networking to create clustered infrastructure with minimal manual configuration. The platform combines LXD for running virtual machines and system containers, MicroCeph for distributed storage and MicroOVN for networking. These components work together to provide a consistent environment for hosting applications and services across multiple physical machines. MicroCloud is particularly suitable for organisations that need local computing infrastructure without the complexity of a large-scale cloud deployment. Typical uses include edge computing, development and testing environments, distributed offices and small private data centres. The software automates much of the initial infrastructure configuration, while the underlying components retain their own management interfaces. Administrators can subsequently expand clusters, manage workloads and configure access to shared resources. This is free and open source software. #### Key Features * Automates the creation and configuration of private cloud clusters. * Combines LXD, MicroCeph and MicroOVN into an integrated infrastructure environment. * Runs full virtual machines and lightweight system containers using LXD. * Supports distributed storage using Ceph with replicated data across cluster members. * Provides software-defined networking through OVN. * Offers isolated virtual networks, distributed routing and configurable network connectivity. * Supports high availability through clustered control services, redundant networking and replicated storage. * Automatically integrates additional machines into existing cloud clusters. * Provides local and distributed storage configurations. * Supports live migration of compatible virtual machine workloads between cluster members. * Offers fine-grained access control through LXD’s authorisation mechanisms. * Supports resource isolation and multi-tenancy through LXD projects and access policies. * Provides a graphical management interface, command-line tools and REST API access. * Supports automated and repeatable deployment using preseed configuration files. * Allows dedicated networks for Ceph management, cluster communication and OVN underlay traffic. * Supports deployment across multiple sites and edge computing environments. **Website:** **github.com/canonical/microcloud** **Support:** **Developer:** Canonical Ltd **License:** GNU Affero General Public License v3.0 MicroCloud is written in Go. Learn Go with our recommended **free books** and **free tutorials**. * * * #### Related Software **Infrastructure as a Service (IaaS) Software** --- **OpenStack**| Delivers a massively scalable cloud operating system **CloudStack**| Turnkey solution that includes the entire "stack" of features **OpenNebula**| Cloud computing toolkit **n8n**| Workflow automation tool **Harvester**| Interoperable, hyperconverged infrastructure (HCI) solution **oVirt**| Virtualization platform with an easy-to-use web interface **OpenQRM**| Automated, rapid-deployment, storage-manage, virtualization and cloud **ZStack**| Designed to tackle two problems -- complexity and stability Read our verdict in the **software roundup**. * * * LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of **recommended applications** , including alternatives to popular proprietary software. We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our **Linux resources** to discover more. Know a useful free and open source Linux application we haven't covered? **Suggest a program** for inclusion. Has your software been featured on LinuxLinks? Display one of our **Featured on LinuxLinks badges** on your website or GitHub README. ---

MicroCloud creates small private clouds with LXD virtual machines, Ceph storage, OVN networking and automated cluster configuration. The post MicroCloud – automated private cloud infrastructure appeared first on LinuxLinks.

## Canonical LXD や MicroCloud に重大な脆弱性 2026年10月28日、Canonical LXD や MicroCloud に重大な脆弱性がみつかりました。 続きを読む »

A CVSS 10.0 certificate-validation flaw in LXD and MicroCloud can let an attacker with API access impersonate a trusted client without its private key.

A critical CVSS 10.0 bug lets network attackers impersonate any trusted TLS client and seize container, VM or host root.

Een kritieke kwetsbaarheid in LXD en MicroCloud maakt het mogelijk zich als een vertrouwde client voor te doen zonder diens privésleutel.

A critical security flaw in Canonical LXD and MicroCloud allows unauthorized attackers to impersonate trusted clients and gain administrative control over host machines, according to a recent report b...

Canonical disclosed a critical flaw in LXD and MicroCloud that allows complete authentication bypass, carrying a maximum CVSS score of […]

Canonical patches CVE-2026-112816 in LXD and MicroCloud, a CVSS 10.0 flaw enabling trusted client impersonation without private keys.

A practical response to the LXD and MicroCloud client-certificate authentication bypass, including exposure checks, fixed versions, and management-plane review.

Canonical patches CVE-2026-112816 in LXD and MicroCloud, a CVSS 10.0 flaw enabling trusted client impersonation without private keys.

Introduction: A Trusted Certificate Becomes an Attack Weapon A security vulnerability affecting Canonical's LXD and MicroCloud infrastructure could allow unauthenticated attackers to impersonate trusted clients without possessing their private keys. The issue highlights a fundamental weakness in certificate-based authentication: trusting a public certificate without properly verifying possession of its corresponding private key can undermine the entire authentication mechanism. Canonical has issued security fixes for the affected products.