Tag

Lxd

2 briefs RSS

Canonical LXD and MicroCloud: Authentication bypass (CVE-2026-112816)

An authentication bypass vulnerability (CVE-2026-112816) in the Canonical LXD HTTPS interface allows attackers to impersonate trusted clients via crafted TLS certificate chains, granting unauthorized control over clusters, containers, and host systems.

LXD +1 authentication-bypass v4-10.0-cvss microcloud vulnerability

2t 1c updated 2d ago

critical advisory

LXD Backup Import Bypass Allows Privilege Escalation in Restricted Projects

2 rules 1 TTP 1 CVE

A vulnerability in LXD allows an attacker with instance-creation rights in a restricted project to bypass project restrictions and escalate privileges by crafting a malicious backup archive.

lxd privilege-escalation container-escape cve-2026-34178

2r 1t 1c Apr 10, 2026