Priority HIGH 76
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration.
Vulnerabilities
4 records
TI-2026-45145 CVE-2026-63299
Storage volume cross-project move and snapshot restore bypass project disk limits
Priority MEDIUM 40
An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits.
TI-2026-44537 CVE-2026-62420
Cross-project cluster migration bypasses project restrictions via cluster notification flag
Priority MEDIUM 44
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project security restrictions during cross-project instance migrations.
TI-2026-45146 CVE-2026-63300
Cross-project instance move bypasses all project restrictions allowing host command execution
Priority HIGH 76
An improper validation vulnerability in the instancePostMigration function in lxd/instance_post.go of LXD allows an authenticated attacker with can_create_instances permissions on a restricted project to bypass project-l…