LX
Product
lxd
42
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 18High 5Medium 17Low 2
Watch
Add lxd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-54288 | 6.8 | Oct 2 | Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to… Affected: 4.0.0 before 5.21.4; 6.1 before 6.5 |
| CVE-2023-49721 | 6.7 | Feb 14 | An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD Affected: 5.0.0 before 5.21.0 |
| CVE-2023-48733 | 6.7 | Feb 14 | An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2 Affected: 5.0; 5.21; 5.21 |
| CVE-2026-9639 | 6.5 | Jun 26 | Authenticated Denial of Service via Malicious Backup Tarball in LXD Affected: 5.21.0 before 5.21.5; 6.0 before 6.9 |
| CVE-2025-54293 | 6.5 | Oct 2 | Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on Linux allows authenticated remote attackers to read arbitrary files on the host system via crafted… Affected: 4.0.0 before 5.21.4; 6.0 before 6.5 |
| CVE-2025-54287 | 6.5 | Oct 2 | Template Injection in instance snapshot creation component in Canonical LXD (>= 4.0) allows an attacker with instance configuration permissions to read arbitrary files on the… Affected: 4.0.0 before 5.21.4; 6.1 before 6.5 |
| CVE-2026-86335 | 6.3 | Sep 28 | LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse Affected: 5.21.0 before 5.21.8; 6.0 before 6.10; 4.0 before 5.0.10 |
| CVE-2026-87798 | 5.8 | Sep 28 | LXD client recursive file pull allows directory escape via malicious VM agent Affected: 4.0.2 before 4.0.14; 5.0.0 before 5.0.10; 5.21.0 before 5.21.8; 6.0 before 6.9 |
| CVE-2016-1582 | 5.5 | Jun 9 | LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths… Affected: 2.0.1 |
| CVE-2016-1581 | 5.5 | Jun 9 | LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary… Affected: through 2.0.1 |
| CVE-2025-54291 | 5.3 | Oct 2 | Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project existence via differing… Affected: 4.0.0 before 5.21.4; 6.1 before 6.5 |
| CVE-2025-54290 | 5.3 | Oct 2 | Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without authentication via… Affected: 4.0.0 before 5.21.4; 6.1 before 6.5 |
| CVE-2026-28385 | 5.0 | Jun 26 | SSRF via image import from URL allows internal network probing by authenticated users Affected: 6.0 before 6.10 |
| CVE-2025-54292 | 4.6 | Oct 2 | Path traversal in Canonical LXD LXD-UI versions before 6.5 and 5.21.4 on all platforms allows remote authenticated attackers to access or modify unintended resources via crafted… Affected: 5.0.0 before 5.21.4; 6.0 before 6.5 |
| CVE-2026-63295 | 4.3 | Aug 12 | Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated` Affected: 4.0.0 before 4.0.12; 5.0.0 before 5.0.8; 5.21.0 before 5.21.6; 6.0 before 6.10 |
| CVE-2026-3351 | 4.3 | Mar 3 | Authorization Bypass in LXD GET /1.0/certificates Endpoint Affected: 6.6 |
| CVE-2026-86334 | 4.2 | Sep 28 | CLI Path Traversal via Content-Disposition in LXD Image Export/Copy Affected: 4.0.2 before 4.0.14; 5.0.0 before 5.0.10; 5.21.0 before 5.21.8; 6.0 before 6.10 |
Showing 17