Priority MEDIUM 43
Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client that can create instances or custom storag…
Vulnerabilities
4 records
TI-2026-58518 CVE-2026-85185
Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root
Priority HIGH 74
Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client with permission to create instances in a project to…
TI-2026-58681 CVE-2026-85526
Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD
Priority HIGH 76
Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesyst…
Priority MEDIUM 53
Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to…