Canonical LXD

Root RCE via image backup.yaml symlink

Authenticated RCE via unsanitized compression_algorithm

Instance template path traversal allows arbitrary host file write as root

LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration

Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE

Storage volume cross-project move and snapshot restore bypass project disk limits

Cross-project cluster migration bypasses project restrictions via cluster notification flag

Cross-project instance move bypasses all project restrictions allowing host command execution

Project restriction bypass via instance migration config override

Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge

Broken Access Control in Canonical LXD DevLXD API

Importing a crafted backup leads to project restriction bypass

VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf

Update of type field in restricted TLS certificate allows privilege escalation to cluster admin

CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI

Arbitrary file read+write on host via templates/ symlink in malicious image

Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API

LXD Snapshot Import Privilege Escalation Vulnerability

Path Traversal in LXD Instance Log File Retrieval

Arbitrary File Read via Template Injection in Snapshot Patterns

Project existence disclosure in LXD images API

Project Existence Disclosure via Error Handling in LXD Image Export

Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server

An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.

Authenticated Denial of Service via Malicious Backup Tarball in LXD

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors.

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors.

SSRF via image import from URL allows internal network probing by authenticated users

Client-Side Path Traversal in LXD-UI

Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`

Authorization Bypass in LXD GET /1.0/certificates Endpoint

Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store.

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured.