CVE-2026-9640: A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of…

PriorityP348high7.2CVSS 3.1

AVNACLPRHUINSUCHIHAH

EPSS

0.34%

26.4th percentile

A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy restrictions by importing a maliciously crafted instance backup containing restricted configuration keys within a snapshot. When the snapshot is restored, these restricted keys are applied to the live instance without policy validation. Starting the modified instance grants the operator unauthorized host root access.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
canonical	lxd	>= 4.12 < 5.0.7	5.0.7
canonical	lxd	>= 5.0.0 < 5.0.7	5.0.7
canonical	lxd	>= 5.21.0 < 5.21.5	5.21.5
canonical	lxd	>= 6.0 < 6.9	6.9

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.