Login Request a demo
LX
Product
lxd
by Canonical · last CVE Sep 28, 2026
42
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities42In the news0Timeline
Severity mix
Critical 18High 5Medium 17Low 2
Severity
All severities42Critical18High5Medium17Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add lxd to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-54286
8.8
0%
Oct 2
CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI
Affected: 5.0 before 5.0.5; 5.21 before 5.21.4; 6.0 before 6.5
CVE-2026-16033
8.5
0%
Aug 12
Arbitrary file read+write on host via templates/ symlink in malicious image
Affected: 4.0.0 before 4.0.12; 5.0.0 before 5.0.8
CVE-2025-54289
8.1
0%
Oct 2
Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API
Affected: 6 before 6.5; 5.21 before 5.21.4
CVE-2026-97335
7.7
0%
Sep 28
Incorrect authorization in LXD storage volume API allows reading volumes from other projects
Affected: 5.0.0 before 5.0.10; 5.21.0 before 5.21.8; 6.0 before 6.10
CVE-2026-9640
7.2
1%
Jun 26
LXD Snapshot Import Privilege Escalation Vulnerability
Affected: 5.21.0 before 5.21.5; 5.0.0 before 5.0.7; 6.0 before 6.9
Showing 5