Go/github.com/canonical/lxd

LXD vulnerable to a local privilege escalation through custom storage volumes

Modified: 11/18/2025

Canonical LXD Vulnerable to Privilege Escalation via WebSocket Connection Hijacking in Operations API

Modified: 9/10/2026

Canonical LXD Path Traversal Vulnerability in Instance Log File Retrieval Function

Modified: 9/10/2026

lxd CA certificate sign check bypass

Modified: 12/11/2024

Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server

Modified: 9/10/2026

LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin

Modified: 8/11/2026

lxd's non-recursive certificate listing bypasses per-object authorization and leaks all fingerprints

Modified: 3/23/2026

LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf

Modified: 8/11/2026

lxd has a restricted TLS certificate privilege escalation when in PKI mode

Modified: 6/26/2026

Canonical LXD Project Existence Determination Through Error Handling in Image Export Function

Modified: 9/10/2026

Canonical LXD CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI

Modified: 9/10/2026

LXD: Importing a crafted backup leads to project restriction bypass

Modified: 8/11/2026

Canonical LXD documentation improvement to make clear restricted.devices.disk=allow without restricted.devices.disk.paths also allows shift=true

Modified: 7/22/2025

Canonical LXD Project Existence Determination Through Error Handling in Image Get Function

Modified: 9/10/2026

CA certificate sign check bypass in github.com/canonical/lxd

Modified: 12/11/2024

Restricted TLS certificate privilege escalation when in PKI mode in github.com/canonical/lxd

Modified: 12/11/2024

Privilege Escalation via WebSocket Connection Hijacking in Operations API in github.com/canonical/lxd

Modified: 11/5/2025

Canonical LXD Path Traversal Vulnerability in Instance Log File Retrieval Function in github.com/canonical/lxd

Modified: 11/5/2025

Canonical LXD Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server in github.com/canonical/lxd

Modified: 11/5/2025

Canonical LXD Project Existence Determination Through Error Handling in Image Export Function in github.com/canonical/lxd

Modified: 11/5/2025

CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI in github.com/canonical/lxd

Modified: 11/5/2025

Canonical LXD Project Existence Determination Through Error Handling in Image Get Function in github.com/canonical/lxd

Modified: 11/5/2025

LXD vulnerable to a local privilege escalation through custom storage volumes in lxd in github.com/canonical/lxd

Modified: 11/18/2025

Non-recursive certificate listing bypasses per-object authorization and leaks all fingerprints in github.com/canonical/lxd

Modified: 3/23/2026

Type field in restricted TLS certificate allows privilege escalation in github.com/canonical/lxd

Modified: 8/11/2026

VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf in github.com/canonical/lxd

Modified: 8/11/2026

LXD: Importing a crafted backup leads to project restriction bypass in github.com/canonical/lxd

Modified: 8/11/2026