Arbitrary file write on LXD host via symlink in migration stream

Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD

Instance template path traversal allows arbitrary host file write as root

Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE

Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

Root RCE via image backup.yaml symlink

Project restriction bypass via instance migration config override

Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge

LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration

Storage volume cross-project move and snapshot restore bypass project disk limits

Cross-project cluster migration bypasses project restrictions via cluster notification flag

Cross-project instance move bypasses all project restrictions allowing host command execution

An improper sanitization of the compression_algorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute commands as the LXD daemon on the LXD server…

Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root

Broken Access Control in Canonical LXD DevLXD API

Update of type field in restricted TLS certificate allows privilege escalation to cluster admin

Importing a crafted backup leads to project restriction bypass

VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf

Cross-Site Request Forgery (CSRF) in LXD-UI in Canonical LXD versions >= 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted…

Arbitrary file read+write on host via templates/ symlink in malicious image

Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute…

Incorrect authorization in LXD storage volume API allows reading volumes from other projects

LXD Snapshot Import Privilege Escalation Vulnerability

Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to…

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD

An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2

Authenticated Denial of Service via Malicious Backup Tarball in LXD

Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on Linux allows authenticated remote attackers to read arbitrary files on the host system via crafted…

Template Injection in instance snapshot creation component in Canonical LXD (>= 4.0) allows an attacker with instance configuration permissions to read arbitrary files on the…

LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse

LXD client recursive file pull allows directory escape via malicious VM agent

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths…

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary…

Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing…

Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without authentication via…

SSRF via image import from URL allows internal network probing by authenticated users

Path traversal in Canonical LXD LXD-UI versions before 6.5 and 5.21.4 on all platforms allows remote authenticated attackers to access or modify unintended resources via crafted…

Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`

Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints…

CLI Path Traversal via Content-Disposition in LXD Image Export/Copy

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured

Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store