{"kind": "product", "path": "vulns/debian-13/lxd", "name": "lxd", "product": "lxd", "ecosystem": "Debian:13", "items": [{"id": "CVE-2026-87798", "noindex": false, "published": "2026-09-28T13:22:36.561Z", "modified": "2026-09-28T16:32:28.148Z", "cvss": 5.8, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N", "severity": "medium", "epss": 0.00188, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-87798", "title": "LXD client recursive file pull allows directory escape via malicious VM agent", "description": "Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 (fixed in 4.0.14, 5.0.10 and 5.21.8) on Linux allows an attacker with root access inside a virtual machine to write attacker-controlled files or directory trees to arbitrary paths on the client host, with the operator's privileges. The attacker does this by using a modified lxd-agent that returns inconsistent SFTP directory listings and Lstat results.", "references": ["https://github.com/canonical/lxd/security/advisories/GHSA-mr8v-hx34-hfvf", "https://nvd.nist.gov/vuln/detail/CVE-2026-87798"], "fixes": [], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-87799", "noindex": false, "published": "2026-09-28T13:22:29.148Z", "modified": "2026-09-29T03:55:19.115Z", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.00407, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-87799", "title": "Arbitrary file write on LXD host via symlink in migration stream", "description": "Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write attacker-controlled files to arbitrary paths on the target host as root, leading to full host compromise. The attacker does this with a crafted rsync or btrfs send stream that plants a symlink in the transferred volume, such as rootfs or root.img, and then writes through it.", "references": ["https://github.com/canonical/lxd/security/advisories/GHSA-fmc3-3cpq-6whr", "https://nvd.nist.gov/vuln/detail/CVE-2026-87799"], "fixes": [], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-97335", "noindex": false, "published": "2026-09-28T13:22:19.371Z", "modified": "2026-09-28T16:32:28.403Z", "cvss": 7.7, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "severity": "high", "epss": 0.00205, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-97335", "title": "Incorrect authorization in LXD storage volume API allows reading volumes from other projects", "description": "Incorrect authorization in the custom storage volume creation endpoint in Canonical LXD versions 5.0.0 and later (fixed in 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client with permission to create custom volumes in a project to copy, and so read, any custom storage volume from any other project on the server, including its snapshots and configuration. The client does this with a crafted request that sets a source volume and source.project but omits source.type.", "references": ["https://github.com/canonical/lxd/security/advisories/GHSA-p456-92fx-44xh", "https://nvd.nist.gov/vuln/detail/CVE-2026-97335"], "fixes": [], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-85185", "noindex": false, "published": "2026-09-28T13:21:51.596Z", "modified": "2026-09-28T16:32:28.529Z", "cvss": 9.6, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H", "severity": "critical", "epss": 0.00369, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-85185", "title": "Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root", "description": "Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is btrfs, the client can also place attacker-controlled content at arbitrary host paths, leading to full host compromise. The client does this with a crafted subvolume path containing ../ sequences, sent in either of two ways: in the optimized_header.yaml of an optimized btrfs backup, or in the btrfs migration header sent by a malicious migration source", "references": ["https://github.com/canonical/lxd/security/advisories/GHSA-27q7-qwhm-c34p", "https://nvd.nist.gov/vuln/detail/CVE-2026-85185"], "fixes": [], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-85526", "noindex": false, "published": "2026-09-28T13:21:40.621Z", "modified": "2026-09-29T03:55:18.376Z", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.00528, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-85526", "title": "Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD", "description": "Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes[].path entry in backup/optimized_header.yaml during a btrfs optimized backup import.", "references": ["https://github.com/canonical/lxd/security/advisories/GHSA-h85r-gjgx-g2rv", "https://github.com/canonical/lxd-private/pull/87", "https://github.com/canonical/lxd-private/pull/105"], "fixes": [], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-86335", "noindex": false, "published": "2026-09-28T13:21:29.891Z", "modified": "2026-09-28T16:32:28.655Z", "cvss": 6.3, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N", "severity": "medium", "epss": 0.00225, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-86335", "title": "LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse", "description": "Missing Authorization in imageDownload in Canonical LXD before 5.0.10, 5.21.8, and 6.10 on Linux allows a project-restricted client to access private images from other projects via local fingerprint reuse during image or instance import requests.", "references": ["https://github.com/canonical/lxd/security/advisories/GHSA-j7p3-5g2v-69j8", "https://github.com/canonical/lxd/pull/19003", "https://github.com/canonical/lxd/pull/19002"], "fixes": [], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-86334", "noindex": false, "published": "2026-09-28T13:21:15.612Z", "modified": "2026-09-28T17:56:11.126Z", "cvss": 4.2, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L", "severity": "medium", "epss": 0.00331, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-86334", "title": "CLI Path Traversal via Content-Disposition in LXD Image Export/Copy", "description": "Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a crafted Content-Disposition header filename parameter during unified image export or copy operations into a local directory target.", "references": ["https://github.com/canonical/lxd/security/advisories/GHSA-g4cm-f533-78hq", "https://github.com/canonical/lxd/pull/18977", "https://github.com/canonical/lxd/pull/18976"], "fixes": [], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-66897", "noindex": false, "published": "2026-08-24T09:08:04.188Z", "modified": "2026-08-25T03:55:49.930Z", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.00717, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-66897", "title": "Instance template path traversal allows arbitrary host file write as root", "description": "A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions, or any user launching a crafted image, to overwrite arbitrary files on the host system as root. When processing target template paths specified in metadata.yaml, LXD validates the path against a confined os.Root directory handle but subsequently opens and creates the file using os.Create with an unconfined string path. This discrepancy between path resolution checks and file creation allows an attacker to escape directory confinement, overwrite root-owned host files, and achieve host root code execution.", "references": ["https://github.com/canonical/lxd/security/advisories/GHSA-q39m-8fx9-42fv", "https://nvd.nist.gov/vuln/detail/CVE-2026-66897"], "fixes": [], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-55622", "noindex": false, "published": "2026-08-21T14:40:35.432Z", "modified": "2026-08-21T15:35:57.698Z", "cvss": 7.7, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "severity": "high", "epss": 0.0034, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-55622", "title": "Incus has a project restriction bypass in instance copy across projects", "description": "Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in that project can copy the instance to a new project. This issue could allow an attacker to access secrets in instances they are not authorized to access. Version 7.2.0 patches the issue.", "references": ["https://github.com/lxc/incus/security/advisories/GHSA-c9f5-j9c3-mhrg", "https://nvd.nist.gov/vuln/detail/CVE-2026-55622"], "fixes": ["5.0.2+git20231211.1364ae4-9+deb13u7"], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-55621", "noindex": false, "published": "2026-08-21T14:39:43.775Z", "modified": "2026-08-21T16:41:23.236Z", "cvss": 7.7, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "severity": "high", "epss": 0.0034, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-55621", "title": "Incus has a project restriction bypass for custom volume copy across projects", "description": "Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for custom volume copying where an attacker knowing the name of a project that they don't have access to and the name of a custom volume in that project can copy the custom volume to a new project. This issue could allow an attacker to access secrets in custom volumes they are not authorized to access. Version 7.2.0 patches the issue.", "references": ["https://github.com/lxc/incus/security/advisories/GHSA-64f3-v33m-w89f", "https://nvd.nist.gov/vuln/detail/CVE-2026-55621"], "fixes": ["5.0.2+git20231211.1364ae4-9+deb13u7"], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-48769", "noindex": false, "published": "2026-08-21T14:38:38.984Z", "modified": "2026-08-21T15:16:24.468Z", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.00731, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48769", "title": "Incus has an arbitrary file write on its client due to trusted image hash", "description": "Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the Incus client when a malicious image server returns a crafted `Incus-Image-Hash` header. This can lead to arbitrary command execution as root on the server. Version 7.2.0 patches the issue.", "references": ["https://github.com/lxc/incus/security/advisories/GHSA-f6m5-xw2g-xc4x", "https://nvd.nist.gov/vuln/detail/CVE-2026-48769"], "fixes": ["5.0.2+git20231211.1364ae4-9+deb13u7"], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-48755", "noindex": false, "published": "2026-08-21T14:37:25.389Z", "modified": "2026-08-21T21:44:16.989Z", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.00731, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48755", "title": "Incus has an argument injection in backup compression algorithm leading to AFW and ACE", "description": "Incus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of user-provided backup compression algorithm leads to argument injection in the constructed command line. This leads to an arbitrary file write on the host, possibly leading to arbitrary command execution. Version 7.1.0 patches the issue.", "references": ["https://github.com/lxc/incus/security/advisories/GHSA-v6mj-8pf4-hhw4", "https://nvd.nist.gov/vuln/detail/CVE-2026-48755"], "fixes": ["5.0.2+git20231211.1364ae4-9+deb13u7"], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-48752", "noindex": false, "published": "2026-08-21T14:31:57.555Z", "modified": "2026-08-21T16:40:20.053Z", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.00731, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48752", "title": "Incus has arbitrary file read+write on host via templates/ symlink in malicious image", "description": "Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 patches the issue.", "references": ["https://github.com/lxc/incus/security/advisories/GHSA-vxp5-584q-c479", "https://nvd.nist.gov/vuln/detail/CVE-2026-48752"], "fixes": ["5.0.2+git20231211.1364ae4-9+deb13u7"], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-48751", "noindex": false, "published": "2026-08-21T14:21:03.073Z", "modified": "2026-08-21T15:15:09.821Z", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.00637, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48751", "title": "Incus has a restricted project bypass leading to arbitrary command execution", "description": "Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the `restricted.containers.lowlevel=block` setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as `raw.lxc` and `raw.qemu`. Version 7.2.0 patches the issue.", "references": ["https://github.com/lxc/incus/security/advisories/GHSA-48q5-w887-33wv", "https://nvd.nist.gov/vuln/detail/CVE-2026-48751"], "fixes": ["5.0.2+git20231211.1364ae4-9+deb13u7"], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-48750", "noindex": false, "published": "2026-08-21T14:19:45.109Z", "modified": "2026-08-26T17:24:53.540Z", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.00731, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48750", "title": "Incus has an arbitrary file write on host via `exec-output` symlink in crafted image", "description": "Incus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-output` parameter of the `/instances/$name/exec` endpoint stores the output of the command in the `exec-output` directory of the instance. If `exec-output` is a symlink, file named `exec_UUID.stdout` and `exec_UUID.stderr` can be written to an arbitrary location where the `.stdout` file will contain arbitrary content. This behavior can be abused for arbitrary command execution. Version 7.2.0 contains a patch.", "references": ["https://github.com/lxc/incus/security/advisories/GHSA-73hr-m85f-64v9", "https://nvd.nist.gov/vuln/detail/CVE-2026-48750"], "fixes": ["5.0.2+git20231211.1364ae4-9+deb13u7"], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-48749", "noindex": false, "published": "2026-08-21T14:17:54.009Z", "modified": "2026-08-21T15:37:47.104Z", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.00731, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48749", "title": "Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image", "description": "Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 fixes the issue.", "references": ["https://github.com/lxc/incus/security/advisories/GHSA-2q3f-q5pq-g8wv", "https://nvd.nist.gov/vuln/detail/CVE-2026-48749"], "fixes": ["5.0.2+git20231211.1364ae4-9+deb13u7"], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-16033", "noindex": false, "published": "2026-08-12T20:11:08.781Z", "modified": "2026-08-13T12:46:08.117Z", "cvss": 8.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "severity": "high", "epss": 0.00467, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-16033", "title": "Arbitrary file read+write on host via templates/ symlink in malicious image", "description": "A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unconstrained file creation. When processing image metadata templates, LXD fails to properly sanitize or restrict template file paths from escaping the instance templates directory (specifically affecting virtual machine / QEMU driver execution paths). An attacker can exploit this flaw by providing a crafted image archive with malicious template directives containing path traversal sequences, causing LXD to access or write files outside the intended template directory on the host system.", "references": ["https://github.com/canonical/lxd/security/advisories/GHSA-9hcm-hxh5-7xxh", "https://nvd.nist.gov/vuln/detail/CVE-2026-16033"], "fixes": [], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-66898", "noindex": false, "published": "2026-08-12T20:07:32.889Z", "modified": "2026-08-13T13:40:18.070Z", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.00592, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-66898", "title": "Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE", "description": "A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, LXD fails to validate instance and storage volume names contained within the archive metadata. An attacker can exploit this flaw by supplying a crafted backup archive with malicious instance or volume names containing path traversal sequences, potentially allowing file access or overwriting outside the designated restore directory.", "references": ["https://github.com/canonical/lxd/security/advisories/GHSA-m857-c7gc-c984", "https://nvd.nist.gov/vuln/detail/CVE-2026-66898"], "fixes": [], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-63293", "noindex": false, "published": "2026-08-12T20:00:09.214Z", "modified": "2026-08-13T12:40:35.947Z", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.00592, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-63293", "title": "Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root", "description": "A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking an image archive, LXD fails to validate whether the metadata.yaml file is a symbolic link. An attacker can exploit this flaw by providing a crafted image archive with a symlinked metadata.yaml file pointing to target file paths on the host system.", "references": ["https://github.com/canonical/lxd/security/advisories/GHSA-j825-cg34-5fr5", "https://nvd.nist.gov/vuln/detail/CVE-2026-63293"], "fixes": [], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}, {"id": "CVE-2026-63294", "noindex": false, "published": "2026-08-12T19:57:07.898Z", "modified": "2026-08-13T12:38:48.134Z", "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "critical", "epss": 0.00878, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-63294", "title": "Root RCE via image backup.yaml symlink", "description": "A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the import or unpacking of crafted image or backup archives, LXD fails to properly validate and confine the backup.yaml file when it exists as a symbolic link. An attacker can exploit this flaw by providing a malicious archive with a symlinked backup.yaml file, causing LXD to process unconfined configuration metadata and execute arbitrary commands with root privileges.", "references": ["https://github.com/canonical/lxd/security/advisories/GHSA-fv82-v4fj-mm4m", "https://nvd.nist.gov/vuln/detail/CVE-2026-63294"], "fixes": [], "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}]}], "total": 55, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 3, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "lxd", "path": "vulns/debian-13/lxd", "ecosystem": "Debian:13"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 7, "kev": 0}, "lastmod": "2026-09-29T03:55:19.115Z", "early_advisories": [], "license": "You may freely use the PatchFirst selection and our additions (priorities, early warnings, texts, summaries and aggregates) for your own purposes, including internal business use. Resale, commercial distribution and bulk mirroring of this selection or these additions require a written agreement with the operator. Whenever you use or publish the selection or our additions, credit PatchFirst (https://patchfirst.dev/vulns/) with this link to the regional feed page. Original records from open sources remain subject to their respective licenses and terms. These conditions do not restrict your rights to the original data, which you can obtain directly from those sources.", "terms_url": "https://patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "Records are selected, normalized and combined by PatchFirst; summaries and translations may be added. News is credited with a link to the original source in each entry.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Upstream licenses vary; see the source catalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Free public scores; attribution requested (FIRST EPSS, scores generated by Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}