An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an instance to a target project, LXD accepts configuration overrides without validating the new configuration against the target project's enforced restrictions. An attacker can exploit this flaw to move instances with disallowed high-privilege configurations into restricted projects, bypassing security controls.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/canonical/lxd/security/advisories/GHSA-gcr9-5q6r-w625 Vendor Advisory, Exploit, Mitigation
- https://github.com/canonical/lxd/security/advisories/GHSA-gcr9-5q6r-w625 Vendor Advisory, Exploit, Mitigation
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 9.9 · canonicalNVD modified 2026-10-23 19:10
Affected (CPE criteria) 1
cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*
References 2
- https://github.com/canonical/lxd/security/advisories/GHSA-gcr9-5q6r-w625 Vendor Advisory, Exploit, Mitigation
- https://github.com/canonical/lxd/security/advisories/GHSA-gcr9-5q6r-w625 Vendor Advisory, Exploit, Mitigation