LX
Product
lxd
42
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 18High 5Medium 17Low 2
Watch
Add lxd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-87799 | 9.9 | Sep 28 | Arbitrary file write on LXD host via symlink in migration stream Affected: 4.0.0 before 4.0.14; 5.0.0 before 5.0.10; 5.21.0 before 5.21.8; 6.0 before 6.10 |
| CVE-2026-85526 | 9.9 | Sep 28 | Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD Affected: 4.0.0 before 4.0.14; 5.0.0 before 5.0.10; 5.21.0 before 5.21.8; 6.0 before 6.10 |
| CVE-2026-66897 | 9.9 | Aug 24 | Instance template path traversal allows arbitrary host file write as root Affected: 4.0.0 before 4.0.13; 5.0.0 before 5.0.9; 5.21.0 before 5.21.7; 6.0 before 6.10 |
| CVE-2026-66898 | 9.9 | Aug 12 | Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE Affected: 4.0.0 before 4.0.12; 5.0.0 before 5.0.4; 5.21.0 before 5.21.2; 6.0 before 6.1 |
| CVE-2026-63293 | 9.9 | Aug 12 | Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root Affected: 4.0.0 before 4.0.12; 5.0.0 before 5.0.8; 5.21.0 before 5.21.6; 6.0 before 6.10 |
| CVE-2026-63294 | 9.9 | Aug 12 | Root RCE via image backup.yaml symlink Affected: 4.0.0 before 4.0.12; 5.0.0 before 5.0.8; 5.21.0 before 5.21.6; 6.0 before 6.10 |
| CVE-2026-63296 | 9.9 | Aug 12 | Project restriction bypass via instance migration config override Affected: 5.0.0 before 5.0.8; 5.21.0 before 5.21.6; 6.0 before 6.10 |
| CVE-2026-63297 | 9.9 | Aug 12 | Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge Affected: 5.0.0 before 5.0.8; 5.21.0 before 5.21.6 |
| CVE-2026-63298 | 9.9 | Aug 12 | LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration Affected: 5.0.0 before 5.0.8; 5.21.0 before 5.21.6; 4.0.0 before 4.0.12 |
| CVE-2026-63299 | 9.9 | Aug 12 | Storage volume cross-project move and snapshot restore bypass project disk limits Affected: 5.0.0 before 5.0.8; 5.21.0 before 5.21.6; 6.0 before 6.10 |
| CVE-2026-62420 | 9.9 | Aug 12 | Cross-project cluster migration bypasses project restrictions via cluster notification flag Affected: 5.0.0 before 5.0.8; 5.21.0 before 5.21.6; 6.0 before 6.10 |
| CVE-2026-63300 | 9.9 | Aug 12 | Cross-project instance move bypasses all project restrictions allowing host command execution Affected: 5.0.0 before 5.0.8; 5.21.0 before 5.21.6; 6.0 before 6.10 |
| CVE-2026-28384 | 9.9 | Mar 12 | Authenticated RCE via unsanitized compression_algorithm Affected: 6.0 before 6.7; 5.21.0 before 5.21.4; 5.0.0 before 5.0.6; 4.12 |
| CVE-2026-85185 | 9.6 | Sep 28 | Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root Affected: 4.0.2 before 4.0.14; 5.0.0 before 5.0.10; 5.21.0 before 5.21.8; 6.0 before 6.10 |
| CVE-2026-12411 | 9.6 | Jun 26 | Broken Access Control in Canonical LXD DevLXD API Affected: 6.6 before 6.9 |
| CVE-2026-34179 | 9.1 | Apr 9 | Update of type field in restricted TLS certificate allows privilege escalation to cluster admin Affected: 4.12.0 before 5.0.7; 5.1.0 before 5.21.5; 6.0.0 before 6.8.0 |
| CVE-2026-34178 | 9.1 | Apr 9 | Importing a crafted backup leads to project restriction bypass Affected: 4.12.0 before 5.0.7; 5.1.0 before 5.21.5; 6.0.0 before 6.8.0 |
| CVE-2026-34177 | 9.1 | Apr 9 | VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf Affected: 4.12.0 before 5.0.7; 5.1.0 before 5.21.5; 6.0.0 before 6.8.0 |
Showing 18