Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Canonical lxd 5.0.7, 5.21.5, 6.8.0 Clear all filters
TI-2026-26476 CVE-2026-34179 · GHSA-c3h3-89qf-jqm5

Update of type field in restricted TLS certificate allows privilege escalation to cluster admin

Priority HIGH 74

In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate the Type field when handling PUT/PATCH requests to /1.0/certificates/{fingerprint} for restricted TLS…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00278 Published 2026-04-09 Fixed in 5.0.7, 5.21.5 +1 CWE-915
TI-2026-26475 CVE-2026-34178 · GHSA-q96j-3fmm-7fv4

Importing a crafted backup leads to project restriction bypass

Priority HIGH 74

In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but creates the instance from backup/container/backup.yaml, a separate file in the…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00432 Published 2026-04-09 Fixed in 5.0.7, 5.21.5 +1 CWE-20
TI-2026-26474 CVE-2026-34177 · GHSA-fm2x-c5qw-4h6f

VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf

Priority HIGH 74

Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden (lxd/project/limits/permissions.go), which omits raw.apparmor and raw.qemu.conf from the set of keys blocked under the…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00369 Published 2026-04-09 Fixed in 5.0.7, 5.21.5 +1 CWE-184