Authorization bypass via instance migration config override in LXD (CVE-2026-63296)

An authorization bypass vulnerability in LXD allows an authenticated user in a restricted project to supply arbitrary configuration overrides during instance migration without any project restriction enforcement. The migrated instance is recreated on the target cluster member with security-critical settings such as `security.privileged=true`, enabling a full container escape and arbitrary command execution on the host as root. Affected versions: - >= 5.0 We recommend updating to: 5.0.8, 5.21.6, 6.10. CVSS 9.9 · our assessment: act_now Reference: https://github.com/canonical/lxd/security/advisories/GHSA-gcr9-5q6r-w625 Details: https://vuln.today/cve/CVE-2026-63296