Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on Linux allows authenticated remote attackers to read arbitrary files on the host system via crafted log file names or symbolic links.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/canonical/lxd/security/advisories/GHSA-472f-vmf2-pr3h Exploit, Vendor Advisory
- https://github.com/canonical/lxd/security/advisories/GHSA-472f-vmf2-pr3h Exploit, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.1 · canonicalNVD modified 2026-10-12 15:10
Affected (CPE criteria) 1
cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*
References 2
- https://github.com/canonical/lxd/security/advisories/GHSA-472f-vmf2-pr3h Exploit, Vendor Advisory
- https://github.com/canonical/lxd/security/advisories/GHSA-472f-vmf2-pr3h Exploit, Vendor Advisory