CVE-2026-66898: A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or…

PriorityP263critical9.9CVSS 3.1

AVNACLPRLUINSCCHIHAH

EPSS

0.34%

27.3th percentile

A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, LXD fails to validate instance and storage volume names contained within the archive metadata. An attacker can exploit this flaw by supplying a crafted backup archive with malicious instance or volume names containing path traversal sequences, potentially allowing file access or overwriting outside the designated restore directory.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
canonical	lxd	>= 4.0.0 < 4.0.12	4.0.12
canonical	lxd	>= 5.0.0 < 5.0.4	5.0.4
canonical	lxd	>= 5.21.0 < 5.21.2	5.21.2
canonical	lxd	>= 6.0 < 6.1	6.1

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.