Canonical Lxd vulnerabilities

CVE-2026-63294 [CRITICAL] CWE-59 CVE-2026-63294: A link following vulnerability in LXD allows an attacker to achieve root command execution on the ho A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the import or unpacking of crafted image or backup archives, LXD fails to properly validate and confine the backup.yaml file when it exists as a symbolic link. An attacker can exploit this flaw by providing a malicious archive with

CVE-2026-33897 [CRITICAL] CVE-2026-33897: Incus is a system container and virtual machine manager Incus is a system container and virtual machine manager. Prior to version 6.23.0, instance template files can be used to cause arbitrary read or writes as root on the host server. Incus allows for pongo2 templates within instances which can be used at various times in the instance lifecycle to template files inside of the instance. This particular implementation of pongo2 within Incus allowed for fi

CVE-2026-63298 [CRITICAL] CWE-78 CVE-2026-63298: An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.*' configuration values, an attacker can manipulate the generated lxc.co

CVE-2026-66897 [CRITICAL] CWE-22 CVE-2026-66897: A path traversal vulnerability in LXD's instance template processing allows an attacker with contain A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions, or any user launching a crafted image, to overwrite arbitrary files on the host system as root. When processing target template paths specified in metadata.yaml, LXD validates the path against a confined os.Root directory handle

CVE-2026-63299 [CRITICAL] CWE-770 CVE-2026-63299: An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level di An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before moving a volume across projects, and volume snapshot r

CVE-2026-63293 [CRITICAL] CWE-59 CVE-2026-63293: A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write op A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking an image archive, LXD fails to validate whether the metadata.yaml file is a symbolic link. An attacker can exploit this flaw by providing a crafted image archive with a symlinked metadata.yaml

CVE-2026-66898 [CRITICAL] CWE-22 CVE-2026-66898: A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during back A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, LXD fails to validate instance and storage volume names contained within the archive metadata. An attacker can exploit this flaw by supplying a crafted backup archive wit

CVE-2026-63300 [CRITICAL] CWE-862 CVE-2026-63300: An improper validation vulnerability in the instancePostMigration function in lxd/instance_post.go o An improper validation vulnerability in the instancePostMigration function in lxd/instance_post.go of LXD allows an authenticated attacker with can_create_instances permissions on a restricted project to bypass project-level security restrictions. When migrating an instance between projects, LXD fails to validate the instance's configuration again

CVE-2026-63297 [CRITICAL] CWE-367 CVE-2026-63297: An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allow An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allows an authenticated attacker to bypass target project restrictions during cross-project instance copies. When copying an instance to a target project, LXD performs restriction checks before configuration merging is complete, creating a time-of-check

CVE-2026-62420 [CRITICAL] CWE-863 CVE-2026-62420: An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target proje An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project security restrictions during cross-project instance migrations. When moving an instance cross-project to a different cluster member via POST /1.0/instances/{name} with migration: true, project: , and target: , the destination node skips all proje

CVE-2026-63296 [CRITICAL] CWE-863 CVE-2026-63296: An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target proje An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an instance to a target project, LXD accepts configuration overrides without validating the new configuration against the target project's enforced restrictions. An attacker can exploit this

CVE-2026-28384 [CRITICAL] CWE-78 CVE-2026-28384: An improper sanitization of the compression_algorithm parameter in Canonical LXD allows an authentic An improper sanitization of the compression_algorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute commands as the LXD daemon on the LXD server via API calls to the image and backup endpoints. This issue affected LXD from 4.12 through 6.6 and was fixed in the snap versions 5.0.6-e49d9f4 (channel 5.0/stable), 5.21

CVE-2026-12411 [CRITICAL] CWE-639 CVE-2026-12411: Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrust Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via a crafted device PATCH request over /dev/lxd when security.devlxd.management.volumes is enabled.

CVE-2026-23954 [HIGH] CVE-2026-23954: Incus is a system container and virtual machine manager Incus is a system container and virtual machine manager. Versions 6.21.0 and below allow a user with the ability to launch a container with a custom image (e.g a member of the ‘incus’ group) to use directory traversal or symbolic links in the templating functionality to achieve host arbitrary file read, and host arbitrary file write. This ultimately results in arbitrary command execution on the host. Wh

CVE-2026-16033 [HIGH] CWE-22 CVE-2026-16033: A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unco A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unconstrained file creation. When processing image metadata templates, LXD fails to properly sanitize or restrict template file paths from escaping the instance templates directory (specifically affecting virtual machine / QEMU driver execution paths). An at

CVE-2026-23953 [HIGH] CVE-2026-23953: Incus is a system container and virtual machine manager Incus is a system container and virtual machine manager. In versions 6.20.0 and below, a user with the ability to launch a container with a custom YAML configuration (e.g a member of the ‘incus’ group) can create an environment variable containing newlines, which can be used to add additional configuration items in the container’s lxc.conf due to newline injection. This can allow adding arbitrary lifecy

CVE-2026-34177 [CRITICAL] CWE-184 CVE-2026-34177: Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidde Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden (lxd/project/limits/permissions.go), which omits raw.apparmor and raw.qemu.conf from the set of keys blocked under the restricted.virtual-machines.lowlevel=block project restriction. A remote attacker with can_edit permission on a VM instance in a

CVE-2025-54289 [HIGH] CWE-1385 CVE-2025-54289: Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker w Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format

CVE-2026-34178 [CRITICAL] CWE-20 CVE-2026-34178: In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/in In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but creates the instance from backup/container/backup.yaml, a separate file in the same archive that is never checked against project restrictions. An authenticated remote attacker with instance-creation permissio

CVE-2026-34179 [CRITICAL] CWE-915 CVE-2026-34179: In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate the Type field when handling PUT/PATCH requests to /1.0/certificates/{fingerprint} for restricted TLS certificate users, allowing a remote authenticated attacker to escalate privileges to cluster admin.