Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 9 total.
Path traversal in LXD backup tarball restore enabling root file write / RCE (CVE-2026-66898)
LXD's backup import endpoint (POST /1.0/instances with Content-Type: application/octet-stream) reads the instance name from the tarball's backup/index.yaml verbatim, with no path validation, and uses it as an on-disk ...
Fixed in 6.1; 5.21.2; 5.0.4; 4.0.12
Symlink following vulnerability enabling root RCE in LXD (CVE-2026-63294)
LXD fails to validate backup.yaml when it exists as a symbolic link during image or backup archive unpacking. An unprivileged, project-confined user with image and instance creation rights can supply a crafted archive...
Fixed in 4.0.12; 5.0.8; 5.21.6; 6.10
Symlink following arbitrary file read/write in LXD (CVE-2026-63293)
LXD fails to validate whether the metadata.yaml file within an image archive is a symbolic link during image import or unpacking. An authenticated user can supply a crafted image archive containing a symlinked metadat...
Fixed in 4.0.12; 5.0.8; 5.21.6; 6.10
Authorization bypass of project disk limits in LXD storage volumes (CVE-2026-63299)
LXD contains two code paths that allow an authenticated user to bypass project-level disk and volume quotas. The `storagePoolVolumeTypePostMove` function performs a cross-project volume move without invoking the `Allo...
Fixed in 5.0.8; 5.21.6; 6.10
Authorization bypass via instance migration config override in LXD (CVE-2026-63296)
An authorization bypass vulnerability in LXD allows an authenticated user in a restricted project to supply arbitrary configuration overrides during instance migration without any project restriction enforcement. The ...
Fixed in 5.0.8; 5.21.6; 6.10
Newline injection in LXD NVIDIA instance configuration handling (CVE-2026-63298)
LXD's `nvidia.driver.capabilities` instance configuration key uses the `validate.IsAny` validator, which accepts any input without filtering, allowing newline characters to pass through unsanitized into the generated ...
Fixed in 4.0.12; 5.0.8; 5.21.6
Authorization bypass via TOCTOU in LXD cross-project instance copy (CVE-2026-63297)
When copying an instance across projects in LXD, the target project restriction check runs before source instance configuration is merged into the request. This allows an authenticated attacker with view access to a s...
Fixed in 5.0.8; 5.21.6
Authorization bypass in LXD cross-project cluster instance migration (CVE-2026-62420)
An authorization bypass vulnerability in LXD allows an authenticated attacker with project-level access to move an instance cross-project to a different cluster member via POST /1.0/instances/{name}, causing the desti...
Fixed in 5.0.8; 5.21.6; 6.10
Security restriction bypass in LXD cross-project instance migration (CVE-2026-63300)
The `instancePostMigration` function in LXD fails to validate an instance's configuration against the target project's enforced restrictions when moving an instance between projects. An authenticated attacker with `ca...
Fixed in 5.0.8; 5.21.6; 6.10