GO-2026-5576
LXD: Importing a crafted backup leads to project restriction bypass in github.com/canonical/lxd
At a glance
- Published
- Updated
- CVE
- CVE-2026-34178
- Aliases
- GHSA-q96j-3fmm-7fv4
Description
LXD: Importing a crafted backup leads to project restriction bypass in github.com/canonical/lxd
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/canonical/lxd | introduced 0.0.0-20210305023314-538ac3df036e |
References
- https://github.com/canonical/lxd/security/advisories/GHSA-q96j-3fmm-7fv4 ADVISORY
- https://github.com/canonical/lxd/pull/17921 FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |