Canonical LXD
37 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-112816 | 4.0.14 – < 4.0.15 ; 5.0.10 – < 5.0.11 ; 5.21.8 – < 5.21.9 ; … | Improper certificate validation in the HTTPS listener in LXD | CRITICAL 10.0 | 0.3 % | ||
| CVE-2026-87798 | 4.0.2 – < 4.0.14 ; 5.0.0 – < 5.0.10 ; 5.21.0 – < 5.21.8 ; … | LXD client recursive file pull allows directory escape via malicious VM agent | MEDIUM 5.8 | 0.2 % | ||
| CVE-2026-87799 | 4.0.0 – < 4.0.14 ; 5.0.0 – < 5.0.10 ; 5.21.0 – < 5.21.8 ; … | Arbitrary file write on LXD host via symlink in migration stream | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-97335 | 5.0.0 – < 5.0.10 ; 5.21.0 – < 5.21.8 ; 6.0 – < 6.10 | Incorrect authorization in LXD storage volume API allows reading volumes from other projects | HIGH 7.7 | 0.2 % | ||
| CVE-2026-85185 | 4.0.2 – < 4.0.14 ; 5.0.0 – < 5.0.10 ; 5.21.0 – < 5.21.8 ; … | Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root | CRITICAL 9.6 | 0.4 % | ||
| CVE-2026-85526 | 4.0.0 – < 4.0.14 ; 5.0.0 – < 5.0.10 ; 5.21.0 – < 5.21.8 ; … | Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-86335 | 5.21.0 – < 5.21.8 ; 6.0 – < 6.10 ; 4.0 – < 5.0.10 | LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse | MEDIUM 6.3 | 0.2 % | ||
| CVE-2026-86334 | 4.0.2 – < 4.0.14 ; 5.0.0 – < 5.0.10 ; 5.21.0 – < 5.21.8 ; … | CLI Path Traversal via Content-Disposition in LXD Image Export/Copy | MEDIUM 4.2 | 0.3 % | ||
| CVE-2026-66897 | 4.0.0 – < 4.0.13 ; 5.0.0 – < 5.0.9 ; 5.21.0 – < 5.21.7 ; … | Instance template path traversal allows arbitrary host file write as root | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-16033 | 4.0.0 – < 4.0.12 ; 5.0.0 – < 5.0.8 | Arbitrary file read+write on host via templates/ symlink in malicious image | HIGH 8.5 | 0.5 % | ||
| CVE-2026-66898 | 4.0.0 – < 4.0.12 ; 5.0.0 – < 5.0.4 ; 5.21.0 – < 5.21.2 ; … | Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE | CRITICAL 9.9 | 0.6 % | ||
| CVE-2026-63293 | 4.0.0 – < 4.0.12 ; 5.0.0 – < 5.0.8 ; 5.21.0 – < 5.21.6 ; … | Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root | CRITICAL 9.9 | 0.6 % | ||
| CVE-2026-63294 | 4.0.0 – < 4.0.12 ; 5.0.0 – < 5.0.8 ; 5.21.0 – < 5.21.6 ; … | Root RCE via image backup.yaml symlink | CRITICAL 9.9 | 0.9 % | ||
| CVE-2026-63295 | 4.0.0 – < 4.0.12 ; 5.0.0 – < 5.0.8 ; 5.21.0 – < 5.21.6 ; … | Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated` | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-63296 | 5.0.0 – < 5.0.8 ; 5.21.0 – < 5.21.6 ; 6.0 – < 6.10 | Project restriction bypass via instance migration config override | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-63297 | 5.0.0 – < 5.0.8 ; 5.21.0 – < 5.21.6 | Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge | CRITICAL 9.9 | 0.3 % | ||
| CVE-2026-63298 | 5.0.0 – < 5.0.8 ; 5.21.0 – < 5.21.6 ; 4.0.0 – < 4.0.12 | LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-63299 | 5.0.0 – < 5.0.8 ; 5.21.0 – < 5.21.6 ; 6.0 – < 6.10 | Storage volume cross-project move and snapshot restore bypass project disk limits | CRITICAL 9.9 | 0.6 % | ||
| CVE-2026-62420 | 5.0.0 – < 5.0.8 ; 5.21.0 – < 5.21.6 ; 6.0 – < 6.10 | Cross-project cluster migration bypasses project restrictions via cluster notification flag | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-63300 | 5.0.0 – < 5.0.8 ; 5.21.0 – < 5.21.6 ; 6.0 – < 6.10 | Cross-project instance move bypasses all project restrictions allowing host command execution | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-28385 | 6.0 – < 6.10 | SSRF via image import from URL allows internal network probing by authenticated users | MEDIUM 5.0 | 0.3 % | ||
| CVE-2026-9640 | 5.21.0 – < 5.21.5 ; 5.0.0 – < 5.0.7 ; 6.0 – < 6.9 | LXD Snapshot Import Privilege Escalation Vulnerability | HIGH 7.2 | 0.6 % | ||
| CVE-2026-9639 | 5.21.0 – < 5.21.5 ; 6.0 – < 6.9 | Authenticated Denial of Service via Malicious Backup Tarball in LXD | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-12411 | 6.6 – < 6.9 | Broken Access Control in Canonical LXD DevLXD API | CRITICAL 9.6 | 0.3 % | ||
| CVE-2026-34179 | 4.12.0 – < 5.0.7 ; 5.1.0 – < 5.21.5 ; 6.0.0 – < 6.8.0 | Update of type field in restricted TLS certificate allows privilege escalation to cluster admin | CRITICAL 9.1 | 0.3 % | ||
| CVE-2026-34178 | 4.12.0 – < 5.0.7 ; 5.1.0 – < 5.21.5 ; 6.0.0 – < 6.8.0 | Importing a crafted backup leads to project restriction bypass | CRITICAL 9.1 | 0.4 % | ||
| CVE-2026-34177 | 4.12.0 – < 5.0.7 ; 5.1.0 – < 5.21.5 ; 6.0.0 – < 6.8.0 | VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf | CRITICAL 9.1 | 0.4 % | ||
| CVE-2026-28384 | 6.0 – < 6.7 ; 5.21.0 – < 5.21.4 ; 5.0.0 – < 5.0.6 ; … | Authenticated RCE via unsanitized compression_algorithm | CRITICAL 9.4 | 0.7 % | ||
| CVE-2026-3351 | 6.6 | Authorization Bypass in LXD GET /1.0/certificates Endpoint | LOW 2.1 | 0.2 % | ||
| CVE-2025-54293 | 6.0 – < 6.5 ; 5.21 – < 5.21.4 | Path Traversal in LXD Instance Log File Retrieval | HIGH 7.1 | 0.6 % | ||
| CVE-2025-54292 | 6.0 – < 6.5 ; 5.21 – < 5.21.4 | Client-Side Path Traversal in LXD-UI | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-54291 | 6.0 – < 6.5 ; 5.21 – < 5.21.4 | Project existence disclosure in LXD images API | MEDIUM 6.9 | 0.4 % | ||
| CVE-2025-54290 | 6.0 – < 6.5 ; 5.21 – < 5.21.4 | Project Existence Disclosure via Error Handling in LXD Image Export | MEDIUM 6.9 | 0.3 % | ||
| CVE-2025-54289 | 6 – < 6.5 ; 5.21 – < 5.21.4 | Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API | HIGH 7.4 | 0.2 % | ||
| CVE-2025-54288 | 6.0 – < 6.5 ; 5.21 – < 5.21.4 | Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server | MEDIUM 5.1 | 0.4 % | ||
| CVE-2025-54287 | 6.0 – < 6.5 ; 5.21 – < 5.21.4 | Arbitrary File Read via Template Injection in Snapshot Patterns | HIGH 7.1 | 0.4 % | ||
| CVE-2025-54286 | 5.0 – < 5.0.5 ; 5.21 – < 5.21.4 ; 6.0 – < 6.5 | CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI | HIGH 7.5 | 0.1 % |