# Canonical LXD.

Every CVE that names Canonical LXD among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Improper certificate validation in the HTTPS listener in LXD](https://agentprime.io/advisories/CVE-2026-112816.md)
  `CVE-2026-112816` · CVE record: Canonical LXD · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Oct 2026 · Tags: Weak cryptography or TLS
- [LXD client recursive file pull allows directory escape via malicious VM agent](https://agentprime.io/advisories/CVE-2026-87798.md)
  `CVE-2026-87798` · CVE record: Canonical LXD · CVSS 5.8 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: Path traversal
- [Arbitrary file write on LXD host via symlink in migration stream](https://agentprime.io/advisories/CVE-2026-87799.md)
  `CVE-2026-87799` · CVE record: Canonical LXD · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Path traversal
- [Incorrect authorization in LXD storage volume API allows reading volumes from other projects](https://agentprime.io/advisories/CVE-2026-97335.md)
  `CVE-2026-97335` · CVE record: Canonical LXD · CVSS 7.7 High · Not analysed yet · Published 28 Sept 2026 · Tags: Broken access control
- [Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root](https://agentprime.io/advisories/CVE-2026-85185.md)
  `CVE-2026-85185` · CVE record: Canonical LXD · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Path traversal
- [Path traversal via Btrfs optimized-backup subvolumes\[\].path enables root file/dir manipulation in LXD](https://agentprime.io/advisories/CVE-2026-85526.md)
  `CVE-2026-85526` · CVE record: Canonical LXD · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Path traversal
- [LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse](https://agentprime.io/advisories/CVE-2026-86335.md)
  `CVE-2026-86335` · CVE record: Canonical LXD · CVSS 6.3 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: Broken access control
- [CLI Path Traversal via Content-Disposition in LXD Image Export/Copy](https://agentprime.io/advisories/CVE-2026-86334.md)
  `CVE-2026-86334` · CVE record: Canonical LXD · CVSS 4.2 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: Path traversal
- [Instance template path traversal allows arbitrary host file write as root](https://agentprime.io/advisories/CVE-2026-66897.md)
  `CVE-2026-66897` · CVE record: Canonical LXD · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [Arbitrary file read+write on host via templates/ symlink in malicious image](https://agentprime.io/advisories/CVE-2026-16033.md)
  `CVE-2026-16033` · CVE record: Canonical LXD · CVSS 8.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Path traversal
- [Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE](https://agentprime.io/advisories/CVE-2026-66898.md)
  `CVE-2026-66898` · CVE record: Canonical LXD · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Path traversal
- [Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root](https://agentprime.io/advisories/CVE-2026-63293.md)
  `CVE-2026-63293` · CVE record: Canonical LXD · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Path traversal
- [Root RCE via image backup.yaml symlink](https://agentprime.io/advisories/CVE-2026-63294.md)
  `CVE-2026-63294` · CVE record: Canonical LXD · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Path traversal
- [Project restriction \`restricted.containers.privilege=isolated\` bypassable by omitting \`security.idmap.isolated\`](https://agentprime.io/advisories/CVE-2026-63295.md)
  `CVE-2026-63295` · CVE record: Canonical LXD · CVSS 4.3 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Broken access control
- [Project restriction bypass via instance migration config override](https://agentprime.io/advisories/CVE-2026-63296.md)
  `CVE-2026-63296` · CVE record: Canonical LXD · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Broken access control
- [Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge](https://agentprime.io/advisories/CVE-2026-63297.md)
  `CVE-2026-63297` · CVE record: Canonical LXD · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Race condition, Broken access control
- [LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration](https://agentprime.io/advisories/CVE-2026-63298.md)
  `CVE-2026-63298` · CVE record: Canonical LXD · CVSS 8.7 High · Not analysed yet · Published 12 Aug 2026 · Tags: Command injection
- [Storage volume cross-project move and snapshot restore bypass project disk limits](https://agentprime.io/advisories/CVE-2026-63299.md)
  `CVE-2026-63299` · CVE record: Canonical LXD · CVSS 8.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service
- [Cross-project cluster migration bypasses project restrictions via cluster notification flag](https://agentprime.io/advisories/CVE-2026-62420.md)
  `CVE-2026-62420` · CVE record: Canonical LXD · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Broken access control
- [Cross-project instance move bypasses all project restrictions allowing host command execution](https://agentprime.io/advisories/CVE-2026-63300.md)
  `CVE-2026-63300` · CVE record: Canonical LXD · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Broken access control
- [SSRF via image import from URL allows internal network probing by authenticated users](https://agentprime.io/advisories/CVE-2026-28385.md)
  `CVE-2026-28385` · CVE record: Canonical lxd · CVSS 5.0 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [LXD Snapshot Import Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-9640.md)
  `CVE-2026-9640` · CVE record: Canonical LXD · CVSS 7.2 High · Not analysed yet · Published 26 Jun 2026 · Tags: Broken access control
- [Authenticated Denial of Service via Malicious Backup Tarball in LXD](https://agentprime.io/advisories/CVE-2026-9639.md)
  `CVE-2026-9639` · CVE record: Canonical LXD · CVSS 6.5 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Memory corruption
- [Authenticated RCE via unsanitized compression_algorithm](https://agentprime.io/advisories/CVE-2026-28384.md)
  `CVE-2026-28384` · CVE record: Canonical lxd · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Mar 2026 · Tags: Command injection
- [Client-Side Path Traversal in LXD-UI](https://agentprime.io/advisories/CVE-2025-54292.md)
  `CVE-2025-54292` · CVE record: Canonical LXD · CVSS 4.8 Medium · Not analysed yet · Published 2 Oct 2025 · Tags: Path traversal

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=canonical-lxd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/canonical-lxd/>. Everything for agents: <https://agentprime.io/llms.txt>.