Approved changes feed: RSS · Atom
cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Canonical (bedcba35-8c3d-5a60-8532-2ba876a6ec88) |
|---|---|
| Product | Lxd (d9d7adbe-e4c0-5c40-8fda-39248c87adc2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/lxc/lxd |
purl2cpe | 2026-06-01 10:12:43.018161 |
pkg:rpm/opensuse/lxd |
purl2cpe | 2026-06-01 10:12:43.018163 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9640 |
vulnerable | 2026-07-29 01:12:09.442071 |
LXD Snapshot Import Privilege Escalation Vulnerability
HIGH (7.2)
A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy restrictions by importing a maliciously crafted instance backup containing restricted configuration keys within a snapshot. When the snapshot is restored, these restricted keys are applied to the live instance without policy validation. Starting the modified instance grants the operator unauthorized host root access.
Published: 2026-06-26T15:50:38.453Z
Updated: 2026-06-30T03:55:24.628Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9639 |
vulnerable | 2026-07-29 01:12:09.441867 |
Authenticated Denial of Service via Malicious Backup Tarball in LXD
MEDIUM (6.5)
Nil-pointer dereference in CreateCustomVolumeFromBackup in LXD up to version 6.8 and 5.21 on Linux allows an authenticated user with can_create_storage_volumes permissions to cause a denial of service via a specially crafted custom-volume backup tarball that omits the expires_at snapshot field.
Published: 2026-06-26T15:39:04.696Z
Updated: 2026-06-26T16:02:11.520Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28385 |
vulnerable | 2026-07-29 00:37:43.231218 |
SSRF via image import from URL allows internal network probing by authenticated users
MEDIUM (5)
In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery (SSRF) vulnerability in the image import functionality allows authenticated users with the can_create_images entitlement to interact with internal network infrastructure via the /images endpoint. When importing an image from a URL source, the LXD daemon fails to validate or restrict outbound destination IP addresses, allowing connections to loopback, RFC1918 private ranges, and cloud metadata endpoints. This enables error-based port scanning and unauthorized interaction with internal HTTP services from the daemon's network position.
Published: 2026-06-26T16:23:56.456Z
Updated: 2026-06-26T17:13:58.172Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12411 |
vulnerable | 2026-07-29 00:23:32.308845 |
Broken Access Control in Canonical LXD DevLXD API
HIGH (8.4)
Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via a crafted device PATCH request over /dev/lxd when security.devlxd.management.volumes is enabled.
Published: 2026-06-26T15:27:55.111Z
Updated: 2026-06-26T16:02:55.284Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3351 |
vulnerable | 2026-06-08 08:01:18.500599 |
Authorization Bypass in LXD GET /1.0/certificates Endpoint
Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.
Published: 2026-03-03T12:49:25.034Z
Updated: 2026-03-05T17:20:25.645Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34179 |
vulnerable | 2026-06-08 07:59:11.859276 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34178 |
vulnerable | 2026-06-08 07:59:11.858900 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34177 |
vulnerable | 2026-06-08 07:59:11.858450 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28384 |
vulnerable | 2026-06-08 07:55:15.233010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54293 |
vulnerable | 2026-06-08 07:33:12.308441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54292 |
vulnerable | 2026-06-08 07:33:12.308159 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54291 |
vulnerable | 2026-06-08 07:33:12.307784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54290 |
vulnerable | 2026-06-08 07:33:12.307492 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54289 |
vulnerable | 2026-06-08 07:33:12.307084 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54288 |
vulnerable | 2026-06-08 07:33:12.306541 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54287 |
vulnerable | 2026-06-08 07:33:12.303250 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54286 |
vulnerable | 2026-06-08 07:33:12.301775 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6219 |
vulnerable | 2026-06-08 06:58:18.272947 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6156 |
vulnerable | 2026-06-08 06:58:17.987694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49721 |
vulnerable | 2026-06-08 06:16:10.319671 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1581 |
vulnerable | 2026-06-08 05:07:31.812974 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.