Approved changes feed: RSS · Atom

cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCanonical (bedcba35-8c3d-5a60-8532-2ba876a6ec88)
ProductLxd (d9d7adbe-e4c0-5c40-8fda-39248c87adc2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/lxc/lxd purl2cpe 2026-06-01 10:12:43.018161
pkg:rpm/opensuse/lxd purl2cpe 2026-06-01 10:12:43.018163

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-9640 vulnerable 2026-07-29 01:12:09.442071 LXD Snapshot Import Privilege Escalation Vulnerability
HIGH (7.2)
A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy restrictions by importing a maliciously crafted instance backup containing restricted configuration keys within a snapshot. When the snapshot is restored, these restricted keys are applied to the live instance without policy validation. Starting the modified instance grants the operator unauthorized host root access.
Published: 2026-06-26T15:50:38.453Z
Updated: 2026-06-30T03:55:24.628Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9639 vulnerable 2026-07-29 01:12:09.441867 Authenticated Denial of Service via Malicious Backup Tarball in LXD
MEDIUM (6.5)
Nil-pointer dereference in CreateCustomVolumeFromBackup in LXD up to version 6.8 and 5.21 on Linux allows an authenticated user with can_create_storage_volumes permissions to cause a denial of service via a specially crafted custom-volume backup tarball that omits the expires_at snapshot field.
Published: 2026-06-26T15:39:04.696Z
Updated: 2026-06-26T16:02:11.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28385 vulnerable 2026-07-29 00:37:43.231218 SSRF via image import from URL allows internal network probing by authenticated users
MEDIUM (5)
In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery (SSRF) vulnerability in the image import functionality allows authenticated users with the can_create_images entitlement to interact with internal network infrastructure via the /images endpoint. When importing an image from a URL source, the LXD daemon fails to validate or restrict outbound destination IP addresses, allowing connections to loopback, RFC1918 private ranges, and cloud metadata endpoints. This enables error-based port scanning and unauthorized interaction with internal HTTP services from the daemon's network position.
Published: 2026-06-26T16:23:56.456Z
Updated: 2026-06-26T17:13:58.172Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12411 vulnerable 2026-07-29 00:23:32.308845 Broken Access Control in Canonical LXD DevLXD API
HIGH (8.4)
Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via a crafted device PATCH request over /dev/lxd when security.devlxd.management.volumes is enabled.
Published: 2026-06-26T15:27:55.111Z
Updated: 2026-06-26T16:02:55.284Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3351 vulnerable 2026-06-08 08:01:18.500599 Authorization Bypass in LXD GET /1.0/certificates Endpoint
Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.
Published: 2026-03-03T12:49:25.034Z
Updated: 2026-03-05T17:20:25.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34179 vulnerable 2026-06-08 07:59:11.859276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34178 vulnerable 2026-06-08 07:59:11.858900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34177 vulnerable 2026-06-08 07:59:11.858450 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28384 vulnerable 2026-06-08 07:55:15.233010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54293 vulnerable 2026-06-08 07:33:12.308441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54292 vulnerable 2026-06-08 07:33:12.308159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54291 vulnerable 2026-06-08 07:33:12.307784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54290 vulnerable 2026-06-08 07:33:12.307492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54289 vulnerable 2026-06-08 07:33:12.307084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54288 vulnerable 2026-06-08 07:33:12.306541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54287 vulnerable 2026-06-08 07:33:12.303250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54286 vulnerable 2026-06-08 07:33:12.301775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6219 vulnerable 2026-06-08 06:58:18.272947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6156 vulnerable 2026-06-08 06:58:17.987694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49721 vulnerable 2026-06-08 06:16:10.319671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1581 vulnerable 2026-06-08 05:07:31.812974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.