What’s Vulnerable › Products
Canonical LXD vulnerabilities
43 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 40 published in the last 12 months.
Check whether your Canonical LXD version is affected
Latest Canonical LXD vulnerabilities
- CVE-2026-112816 — Improper certificate validation in the HTTPS listener in LXD (CVSS 10.0)
- CVE-2026-97335 — Incorrect authorization in LXD storage volume API allows reading volumes from other projects (CVSS 7.7)
- CVE-2026-87799 — Arbitrary file write on LXD host via symlink in migration stream (CVSS 9.9)
- CVE-2026-87798 — LXD client recursive file pull allows directory escape via malicious VM agent (CVSS 5.8)
- CVE-2026-86335 — LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse (CVSS 6.3)
- CVE-2026-86334 — CLI Path Traversal via Content-Disposition in LXD Image Export/Copy (CVSS 4.2)
- CVE-2026-85526 — Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD (CVSS 9.9)
- CVE-2026-85185 — Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root (CVSS 9.6)
- CVE-2026-66897 — Instance template path traversal allows arbitrary host file write as root (CVSS 9.9)
- CVE-2026-66898 — Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE (CVSS 9.9)
- CVE-2026-16033 — Arbitrary file read+write on host via templates/ symlink in malicious image (CVSS 8.5)
- CVE-2026-63300 — Cross-project instance move bypasses all project restrictions allowing host command execution (CVSS 9.9)
- CVE-2026-63299 — Storage volume cross-project move and snapshot restore bypass project disk limits (CVSS 9.9)
- CVE-2026-63298 — LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration (CVSS 9.9)
- CVE-2026-63297 — Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge (CVSS 9.9)
- CVE-2026-63296 — Project restriction bypass via instance migration config override (CVSS 9.9)
- CVE-2026-63295 — Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated` (CVSS 4.3)
- CVE-2026-63294 — Root RCE via image backup.yaml symlink (CVSS 9.9)
- CVE-2026-63293 — Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root (CVSS 9.9)
- CVE-2026-62420 — Cross-project cluster migration bypasses project restrictions via cluster notification flag (CVSS 9.9)
- CVE-2026-28385 — SSRF via image import from URL allows internal network probing by authenticated users (CVSS 5.0)
- CVE-2026-9640 — LXD Snapshot Import Privilege Escalation Vulnerability (CVSS 7.2)
- CVE-2026-9639 — Authenticated Denial of Service via Malicious Backup Tarball in LXD (CVSS 6.5)
- CVE-2026-12411 — Broken Access Control in Canonical LXD DevLXD API (CVSS 9.6)
- CVE-2026-34179 — Update of type field in restricted TLS certificate allows privilege escalation to cluster admin (CVSS 9.1)