{"schema_version":"2","view":"grouped","data":[{"id":3391,"cve_ids":["CVE-2026-87799"],"payload":{"kind":"advisory","title":"Arbitrary file write on LXD host via symlink in migration stream","summary":"Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write attacker-controlled files to arbitrary paths on the target host as root, leading to full host compromise. The attacker does this with a crafted rsync or btrfs send stream that plants a symlink in the transferred volume, such as rootfs or root.img, and then writes through it.","evidence":"cve:CVE-2026-87799","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-87799","aliases":["CVE-2026-87799"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.0","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-29T03:55:19.115Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-fmc3-3cpq-6whr"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-87799","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:55:19.115Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:22:29.148Z"}}},"related_cves":[{"value":"CVE-2026-87799","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1aed20b2-ec18-469c-908f-b73c4fe84cdb","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87799","advisory_id":"1aed20b2-ec18-469c-908f-b73c4fe84cdb","event_types":["advisory"],"published_at":"2026-10-24T21:34:22.689477+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:22:29.148+00:00","detail_url":"/advisories/advisory%3A1aed20b2-ec18-469c-908f-b73c4fe84cdb","group":{"id":"advisory:1aed20b2-ec18-469c-908f-b73c4fe84cdb","revision":1,"primary_event_id":3409,"change":"published","superseded_by":[],"changed":{"id":3409,"cve_ids":["CVE-2026-87799"],"payload":{"kind":"advisory","title":"Arbitrary file write on LXD host via symlink in migration stream","summary":"Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write attacker-controlled files to arbitrary paths on the target host as root, leading to full host compromise. The attacker does this with a crafted rsync or btrfs send stream that plants a symlink in the transferred volume, such as rootfs or root.img, and then writes through it.","evidence":"cve:CVE-2026-87799","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-87799","aliases":["CVE-2026-87799"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.0","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-29T03:55:19.115Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-fmc3-3cpq-6whr"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-87799","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:55:19.115Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:22:29.148Z"}}},"related_cves":[{"value":"CVE-2026-87799","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1aed20b2-ec18-469c-908f-b73c4fe84cdb","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87799","advisory_id":"1aed20b2-ec18-469c-908f-b73c4fe84cdb","event_types":["advisory"],"published_at":"2026-10-24T21:34:22.689477+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:22:29.148+00:00","detail_url":"/events/3409"},"members":[{"id":3409,"cve_ids":["CVE-2026-87799"],"payload":{"kind":"advisory","title":"Arbitrary file write on LXD host via symlink in migration stream","summary":"Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write attacker-controlled files to arbitrary paths on the target host as root, leading to full host compromise. The attacker does this with a crafted rsync or btrfs send stream that plants a symlink in the transferred volume, such as rootfs or root.img, and then writes through it.","evidence":"cve:CVE-2026-87799","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-87799","aliases":["CVE-2026-87799"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.0","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-29T03:55:19.115Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-fmc3-3cpq-6whr"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-87799","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:55:19.115Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:22:29.148Z"}}},"related_cves":[{"value":"CVE-2026-87799","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1aed20b2-ec18-469c-908f-b73c4fe84cdb","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87799","advisory_id":"1aed20b2-ec18-469c-908f-b73c4fe84cdb","event_types":["advisory"],"published_at":"2026-10-24T21:34:22.689477+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:22:29.148+00:00","detail_url":"/events/3409"}]}},{"id":3390,"cve_ids":["CVE-2026-85526"],"payload":{"kind":"advisory","title":"Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD","summary":"Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes[].path entry in backup/optimized_header.yaml during a btrfs optimized backup import.","evidence":"cve:CVE-2026-85526","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-85526","aliases":["CVE-2026-85526"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.0","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-29T03:55:18.376Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-h85r-gjgx-g2rv","https://github.com/canonical/lxd-private/pull/87","https://github.com/canonical/lxd-private/pull/105","https://github.com/canonical/lxd-private/pull/104","https://github.com/canonical/lxd-private/pull/103","https://github.com/canonical/lxd-private/pull/84"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-85526","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:55:18.376Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:21:40.621Z"}}},"related_cves":[{"value":"CVE-2026-85526","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c09dc548-2e98-4f91-8013-1a49a532e33c","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-85526","advisory_id":"c09dc548-2e98-4f91-8013-1a49a532e33c","event_types":["advisory"],"published_at":"2026-10-24T21:34:22.362302+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:21:40.621+00:00","detail_url":"/advisories/advisory%3Ac09dc548-2e98-4f91-8013-1a49a532e33c","group":{"id":"advisory:c09dc548-2e98-4f91-8013-1a49a532e33c","revision":1,"primary_event_id":3408,"change":"published","superseded_by":[],"changed":{"id":3408,"cve_ids":["CVE-2026-85526"],"payload":{"kind":"advisory","title":"Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD","summary":"Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes[].path entry in backup/optimized_header.yaml during a btrfs optimized backup import.","evidence":"cve:CVE-2026-85526","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-85526","aliases":["CVE-2026-85526"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.0","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-29T03:55:18.376Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-h85r-gjgx-g2rv","https://github.com/canonical/lxd-private/pull/87","https://github.com/canonical/lxd-private/pull/105","https://github.com/canonical/lxd-private/pull/104","https://github.com/canonical/lxd-private/pull/103","https://github.com/canonical/lxd-private/pull/84"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-85526","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:55:18.376Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:21:40.621Z"}}},"related_cves":[{"value":"CVE-2026-85526","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c09dc548-2e98-4f91-8013-1a49a532e33c","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-85526","advisory_id":"c09dc548-2e98-4f91-8013-1a49a532e33c","event_types":["advisory"],"published_at":"2026-10-24T21:34:22.362302+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:21:40.621+00:00","detail_url":"/events/3408"},"members":[{"id":3408,"cve_ids":["CVE-2026-85526"],"payload":{"kind":"advisory","title":"Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD","summary":"Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes[].path entry in backup/optimized_header.yaml during a btrfs optimized backup import.","evidence":"cve:CVE-2026-85526","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-85526","aliases":["CVE-2026-85526"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.9,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.0","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-29T03:55:18.376Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-h85r-gjgx-g2rv","https://github.com/canonical/lxd-private/pull/87","https://github.com/canonical/lxd-private/pull/105","https://github.com/canonical/lxd-private/pull/104","https://github.com/canonical/lxd-private/pull/103","https://github.com/canonical/lxd-private/pull/84"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-85526","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:55:18.376Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:21:40.621Z"}}},"related_cves":[{"value":"CVE-2026-85526","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:c09dc548-2e98-4f91-8013-1a49a532e33c","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-85526","advisory_id":"c09dc548-2e98-4f91-8013-1a49a532e33c","event_types":["advisory"],"published_at":"2026-10-24T21:34:22.362302+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:21:40.621+00:00","detail_url":"/events/3408"}]}},{"id":3264,"cve_ids":["CVE-2026-86334"],"payload":{"kind":"advisory","title":"CLI Path Traversal via Content-Disposition in LXD Image Export/Copy","summary":"Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a crafted Content-Disposition header filename parameter during unified image export or copy operations into a local directory target.","evidence":"cve:CVE-2026-86334","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-86334","aliases":["CVE-2026-86334"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.2,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.2","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T17:56:11.126Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-g4cm-f533-78hq","https://github.com/canonical/lxd/pull/18977","https://github.com/canonical/lxd/pull/18976","https://github.com/canonical/lxd/pull/18974","https://github.com/canonical/lxd/pull/18975","https://github.com/canonical/lxd/pull/18940"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-86334","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:55:41.286474Z"}}}],"references":[{"url":"https://github.com/canonical/lxd/security/advisories/GHSA-g4cm-f533-78hq","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:56:11.126Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:21:15.612Z"}}},"related_cves":[{"value":"CVE-2026-86334","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:193e4953-91f1-40d2-a5fa-6bc7f466fe35","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86334","advisory_id":"193e4953-91f1-40d2-a5fa-6bc7f466fe35","event_types":["advisory"],"published_at":"2026-10-24T21:32:03.873986+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:21:15.612+00:00","detail_url":"/advisories/advisory%3A193e4953-91f1-40d2-a5fa-6bc7f466fe35","group":{"id":"advisory:193e4953-91f1-40d2-a5fa-6bc7f466fe35","revision":1,"primary_event_id":3276,"change":"published","superseded_by":[],"changed":{"id":3276,"cve_ids":["CVE-2026-86334"],"payload":{"kind":"advisory","title":"CLI Path Traversal via Content-Disposition in LXD Image Export/Copy","summary":"Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a crafted Content-Disposition header filename parameter during unified image export or copy operations into a local directory target.","evidence":"cve:CVE-2026-86334","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-86334","aliases":["CVE-2026-86334"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.2,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.2","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T17:56:11.126Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-g4cm-f533-78hq","https://github.com/canonical/lxd/pull/18977","https://github.com/canonical/lxd/pull/18976","https://github.com/canonical/lxd/pull/18974","https://github.com/canonical/lxd/pull/18975","https://github.com/canonical/lxd/pull/18940"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-86334","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:55:41.286474Z"}}}],"references":[{"url":"https://github.com/canonical/lxd/security/advisories/GHSA-g4cm-f533-78hq","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:56:11.126Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:21:15.612Z"}}},"related_cves":[{"value":"CVE-2026-86334","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:193e4953-91f1-40d2-a5fa-6bc7f466fe35","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86334","advisory_id":"193e4953-91f1-40d2-a5fa-6bc7f466fe35","event_types":["advisory"],"published_at":"2026-10-24T21:32:03.873986+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:21:15.612+00:00","detail_url":"/events/3276"},"members":[{"id":3276,"cve_ids":["CVE-2026-86334"],"payload":{"kind":"advisory","title":"CLI Path Traversal via Content-Disposition in LXD Image Export/Copy","summary":"Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a crafted Content-Disposition header filename parameter during unified image export or copy operations into a local directory target.","evidence":"cve:CVE-2026-86334","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-86334","aliases":["CVE-2026-86334"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.2,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.2","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T17:56:11.126Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-g4cm-f533-78hq","https://github.com/canonical/lxd/pull/18977","https://github.com/canonical/lxd/pull/18976","https://github.com/canonical/lxd/pull/18974","https://github.com/canonical/lxd/pull/18975","https://github.com/canonical/lxd/pull/18940"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-86334","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T17:55:41.286474Z"}}}],"references":[{"url":"https://github.com/canonical/lxd/security/advisories/GHSA-g4cm-f533-78hq","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T17:56:11.126Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:21:15.612Z"}}},"related_cves":[{"value":"CVE-2026-86334","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:193e4953-91f1-40d2-a5fa-6bc7f466fe35","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86334","advisory_id":"193e4953-91f1-40d2-a5fa-6bc7f466fe35","event_types":["advisory"],"published_at":"2026-10-24T21:32:03.873986+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:21:15.612+00:00","detail_url":"/events/3276"}]}},{"id":3201,"cve_ids":["CVE-2026-97335"],"payload":{"kind":"advisory","title":"Incorrect authorization in LXD storage volume API allows reading volumes from other projects","summary":"Incorrect authorization in the custom storage volume creation endpoint in Canonical LXD versions 5.0.0 and later (fixed in 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client with permission to create custom volumes in a project to copy, and so read, any custom storage volume from any other project on the server, including its snapshots and configuration. The client does this with a crafted request that sets a source volume and source.project but omits source.type.","evidence":"cve:CVE-2026-97335","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-97335","aliases":["CVE-2026-97335"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:32:28.403Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-p456-92fx-44xh"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97335","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T14:02:18.270198Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:32:28.403Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:22:19.371Z"}}},"related_cves":[{"value":"CVE-2026-97335","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6274b4a5-9957-4e59-8a65-24234188cb40","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97335","advisory_id":"6274b4a5-9957-4e59-8a65-24234188cb40","event_types":["advisory"],"published_at":"2026-10-24T21:31:22.018464+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:22:19.371+00:00","detail_url":"/advisories/advisory%3A6274b4a5-9957-4e59-8a65-24234188cb40","group":{"id":"advisory:6274b4a5-9957-4e59-8a65-24234188cb40","revision":1,"primary_event_id":3212,"change":"published","superseded_by":[],"changed":{"id":3212,"cve_ids":["CVE-2026-97335"],"payload":{"kind":"advisory","title":"Incorrect authorization in LXD storage volume API allows reading volumes from other projects","summary":"Incorrect authorization in the custom storage volume creation endpoint in Canonical LXD versions 5.0.0 and later (fixed in 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client with permission to create custom volumes in a project to copy, and so read, any custom storage volume from any other project on the server, including its snapshots and configuration. The client does this with a crafted request that sets a source volume and source.project but omits source.type.","evidence":"cve:CVE-2026-97335","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-97335","aliases":["CVE-2026-97335"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:32:28.403Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-p456-92fx-44xh"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97335","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T14:02:18.270198Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:32:28.403Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:22:19.371Z"}}},"related_cves":[{"value":"CVE-2026-97335","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6274b4a5-9957-4e59-8a65-24234188cb40","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97335","advisory_id":"6274b4a5-9957-4e59-8a65-24234188cb40","event_types":["advisory"],"published_at":"2026-10-24T21:31:22.018464+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:22:19.371+00:00","detail_url":"/events/3212"},"members":[{"id":3212,"cve_ids":["CVE-2026-97335"],"payload":{"kind":"advisory","title":"Incorrect authorization in LXD storage volume API allows reading volumes from other projects","summary":"Incorrect authorization in the custom storage volume creation endpoint in Canonical LXD versions 5.0.0 and later (fixed in 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client with permission to create custom volumes in a project to copy, and so read, any custom storage volume from any other project on the server, including its snapshots and configuration. The client does this with a crafted request that sets a source volume and source.project but omits source.type.","evidence":"cve:CVE-2026-97335","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-97335","aliases":["CVE-2026-97335"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":7.7,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:32:28.403Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-p456-92fx-44xh"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-97335","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T14:02:18.270198Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:32:28.403Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:22:19.371Z"}}},"related_cves":[{"value":"CVE-2026-97335","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:6274b4a5-9957-4e59-8a65-24234188cb40","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97335","advisory_id":"6274b4a5-9957-4e59-8a65-24234188cb40","event_types":["advisory"],"published_at":"2026-10-24T21:31:22.018464+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:22:19.371+00:00","detail_url":"/events/3212"}]}},{"id":3199,"cve_ids":["CVE-2026-87798"],"payload":{"kind":"advisory","title":"LXD client recursive file pull allows directory escape via malicious VM agent","summary":"Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 (fixed in 4.0.14, 5.0.10 and 5.21.8) on Linux allows an attacker with root access inside a virtual machine to write attacker-controlled files or directory trees to arbitrary paths on the client host, with the operator's privileges. The attacker does this by using a modified lxd-agent that returns inconsistent SFTP directory listings and Lstat results.","evidence":"cve:CVE-2026-87798","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-87798","aliases":["CVE-2026-87798"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.2","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.9","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:32:28.148Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-mr8v-hx34-hfvf"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-87798","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T14:04:47.395647Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:32:28.148Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:22:36.561Z"}}},"related_cves":[{"value":"CVE-2026-87798","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:30cea935-a3b9-47dd-86a4-61cece8cd044","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87798","advisory_id":"30cea935-a3b9-47dd-86a4-61cece8cd044","event_types":["advisory"],"published_at":"2026-10-24T21:31:21.413901+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:22:36.561+00:00","detail_url":"/advisories/advisory%3A30cea935-a3b9-47dd-86a4-61cece8cd044","group":{"id":"advisory:30cea935-a3b9-47dd-86a4-61cece8cd044","revision":1,"primary_event_id":3210,"change":"published","superseded_by":[],"changed":{"id":3210,"cve_ids":["CVE-2026-87798"],"payload":{"kind":"advisory","title":"LXD client recursive file pull allows directory escape via malicious VM agent","summary":"Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 (fixed in 4.0.14, 5.0.10 and 5.21.8) on Linux allows an attacker with root access inside a virtual machine to write attacker-controlled files or directory trees to arbitrary paths on the client host, with the operator's privileges. The attacker does this by using a modified lxd-agent that returns inconsistent SFTP directory listings and Lstat results.","evidence":"cve:CVE-2026-87798","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-87798","aliases":["CVE-2026-87798"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.2","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.9","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:32:28.148Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-mr8v-hx34-hfvf"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-87798","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T14:04:47.395647Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:32:28.148Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:22:36.561Z"}}},"related_cves":[{"value":"CVE-2026-87798","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:30cea935-a3b9-47dd-86a4-61cece8cd044","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87798","advisory_id":"30cea935-a3b9-47dd-86a4-61cece8cd044","event_types":["advisory"],"published_at":"2026-10-24T21:31:21.413901+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:22:36.561+00:00","detail_url":"/events/3210"},"members":[{"id":3210,"cve_ids":["CVE-2026-87798"],"payload":{"kind":"advisory","title":"LXD client recursive file pull allows directory escape via malicious VM agent","summary":"Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 (fixed in 4.0.14, 5.0.10 and 5.21.8) on Linux allows an attacker with root access inside a virtual machine to write attacker-controlled files or directory trees to arbitrary paths on the client host, with the operator's privileges. The attacker does this by using a modified lxd-agent that returns inconsistent SFTP directory listings and Lstat results.","evidence":"cve:CVE-2026-87798","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-87798","aliases":["CVE-2026-87798"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.8,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.2","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.9","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:32:28.148Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-mr8v-hx34-hfvf"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-87798","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T14:04:47.395647Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:32:28.148Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:22:36.561Z"}}},"related_cves":[{"value":"CVE-2026-87798","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:30cea935-a3b9-47dd-86a4-61cece8cd044","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-87798","advisory_id":"30cea935-a3b9-47dd-86a4-61cece8cd044","event_types":["advisory"],"published_at":"2026-10-24T21:31:21.413901+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:22:36.561+00:00","detail_url":"/events/3210"}]}},{"id":3198,"cve_ids":["CVE-2026-86335"],"payload":{"kind":"advisory","title":"LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse","summary":"Missing Authorization in imageDownload in Canonical LXD before 5.0.10, 5.21.8, and 6.10 on Linux allows a project-restricted client to access private images from other projects via local fingerprint reuse during image or instance import requests.","evidence":"cve:CVE-2026-86335","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-86335","aliases":["CVE-2026-86335"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"},{"status":"affected","version":"4.0","lessThan":"5.0.10","versionType":"semver"}],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:32:28.655Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-j7p3-5g2v-69j8","https://github.com/canonical/lxd/pull/19003","https://github.com/canonical/lxd/pull/19002","https://github.com/canonical/lxd/pull/19001","https://github.com/canonical/lxd/pull/18987"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-86335","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T13:49:04.323716Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:32:28.655Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:21:29.891Z"}}},"related_cves":[{"value":"CVE-2026-86335","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ef6ef61a-8715-4252-bfb4-0d0710993675","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86335","advisory_id":"ef6ef61a-8715-4252-bfb4-0d0710993675","event_types":["advisory"],"published_at":"2026-10-24T21:31:20.875619+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:21:29.891+00:00","detail_url":"/advisories/advisory%3Aef6ef61a-8715-4252-bfb4-0d0710993675","group":{"id":"advisory:ef6ef61a-8715-4252-bfb4-0d0710993675","revision":1,"primary_event_id":3209,"change":"published","superseded_by":[],"changed":{"id":3209,"cve_ids":["CVE-2026-86335"],"payload":{"kind":"advisory","title":"LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse","summary":"Missing Authorization in imageDownload in Canonical LXD before 5.0.10, 5.21.8, and 6.10 on Linux allows a project-restricted client to access private images from other projects via local fingerprint reuse during image or instance import requests.","evidence":"cve:CVE-2026-86335","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-86335","aliases":["CVE-2026-86335"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"},{"status":"affected","version":"4.0","lessThan":"5.0.10","versionType":"semver"}],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:32:28.655Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-j7p3-5g2v-69j8","https://github.com/canonical/lxd/pull/19003","https://github.com/canonical/lxd/pull/19002","https://github.com/canonical/lxd/pull/19001","https://github.com/canonical/lxd/pull/18987"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-86335","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T13:49:04.323716Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:32:28.655Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:21:29.891Z"}}},"related_cves":[{"value":"CVE-2026-86335","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ef6ef61a-8715-4252-bfb4-0d0710993675","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86335","advisory_id":"ef6ef61a-8715-4252-bfb4-0d0710993675","event_types":["advisory"],"published_at":"2026-10-24T21:31:20.875619+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:21:29.891+00:00","detail_url":"/events/3209"},"members":[{"id":3209,"cve_ids":["CVE-2026-86335"],"payload":{"kind":"advisory","title":"LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse","summary":"Missing Authorization in imageDownload in Canonical LXD before 5.0.10, 5.21.8, and 6.10 on Linux allows a project-restricted client to access private images from other projects via local fingerprint reuse during image or instance import requests.","evidence":"cve:CVE-2026-86335","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-86335","aliases":["CVE-2026-86335"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"},{"status":"affected","version":"4.0","lessThan":"5.0.10","versionType":"semver"}],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:32:28.655Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-j7p3-5g2v-69j8","https://github.com/canonical/lxd/pull/19003","https://github.com/canonical/lxd/pull/19002","https://github.com/canonical/lxd/pull/19001","https://github.com/canonical/lxd/pull/18987"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-86335","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T13:49:04.323716Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:32:28.655Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:21:29.891Z"}}},"related_cves":[{"value":"CVE-2026-86335","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ef6ef61a-8715-4252-bfb4-0d0710993675","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86335","advisory_id":"ef6ef61a-8715-4252-bfb4-0d0710993675","event_types":["advisory"],"published_at":"2026-10-24T21:31:20.875619+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:21:29.891+00:00","detail_url":"/events/3209"}]}},{"id":3197,"cve_ids":["CVE-2026-85185"],"payload":{"kind":"advisory","title":"Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root","summary":"Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is btrfs, the client can also place attacker-controlled content at arbitrary host paths, leading to full host compromise. The client does this with a crafted subvolume path containing ../ sequences, sent in either of two ways: in the optimized_header.yaml of an optimized btrfs backup, or in the btrfs migration header sent by a malicious migration source.","evidence":"cve:CVE-2026-85185","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-85185","aliases":["CVE-2026-85185"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.2","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:32:28.529Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-27q7-qwhm-c34p"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-85185","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T13:55:28.506443Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:32:28.529Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:21:51.596Z"}}},"related_cves":[{"value":"CVE-2026-85185","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3204e17a-266e-41a8-906c-3df1ecd61aee","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-85185","advisory_id":"3204e17a-266e-41a8-906c-3df1ecd61aee","event_types":["advisory"],"published_at":"2026-10-24T21:31:20.631531+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:21:51.596+00:00","detail_url":"/advisories/advisory%3A3204e17a-266e-41a8-906c-3df1ecd61aee","group":{"id":"advisory:3204e17a-266e-41a8-906c-3df1ecd61aee","revision":1,"primary_event_id":3208,"change":"published","superseded_by":[],"changed":{"id":3208,"cve_ids":["CVE-2026-85185"],"payload":{"kind":"advisory","title":"Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root","summary":"Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is btrfs, the client can also place attacker-controlled content at arbitrary host paths, leading to full host compromise. The client does this with a crafted subvolume path containing ../ sequences, sent in either of two ways: in the optimized_header.yaml of an optimized btrfs backup, or in the btrfs migration header sent by a malicious migration source.","evidence":"cve:CVE-2026-85185","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-85185","aliases":["CVE-2026-85185"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.2","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:32:28.529Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-27q7-qwhm-c34p"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-85185","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T13:55:28.506443Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:32:28.529Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:21:51.596Z"}}},"related_cves":[{"value":"CVE-2026-85185","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3204e17a-266e-41a8-906c-3df1ecd61aee","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-85185","advisory_id":"3204e17a-266e-41a8-906c-3df1ecd61aee","event_types":["advisory"],"published_at":"2026-10-24T21:31:20.631531+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:21:51.596+00:00","detail_url":"/events/3208"},"members":[{"id":3208,"cve_ids":["CVE-2026-85185"],"payload":{"kind":"advisory","title":"Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root","summary":"Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is btrfs, the client can also place attacker-controlled content at arbitrary host paths, leading to full host compromise. The client does this with a crafted subvolume path containing ../ sequences, sent in either of two ways: in the optimized_header.yaml of an optimized btrfs backup, or in the btrfs migration header sent by a malicious migration source.","evidence":"cve:CVE-2026-85185","products":[{"name":{"value":"LXD","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-85185","aliases":["CVE-2026-85185"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":9.6,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"repo":"https://github.com/canonical/lxd","vendor":"Canonical","product":"LXD","versions":[{"status":"affected","version":"4.0.2","lessThan":"4.0.14","versionType":"semver"},{"status":"affected","version":"5.0.0","lessThan":"5.0.10","versionType":"semver"},{"status":"affected","version":"5.21.0","lessThan":"5.21.8","versionType":"semver"},{"status":"affected","version":"6.0","lessThan":"6.10","versionType":"semver"}],"platforms":["Linux"],"packageName":"LXD","defaultStatus":"unaffected"}],"modified":"2026-09-28T16:32:28.529Z","provider":"cve","references":["https://github.com/canonical/lxd/security/advisories/GHSA-27q7-qwhm-c34p"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-85185","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T13:55:28.506443Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T16:32:28.529Z"}}],"cna":{"orgId":"cc1ad9ee-3454-478d-9317-d3e869d708bc","shortName":"canonical","dateUpdated":"2026-09-28T13:21:51.596Z"}}},"related_cves":[{"value":"CVE-2026-85185","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3204e17a-266e-41a8-906c-3df1ecd61aee","priority":{"reasons":["publisher_severity"],"severity":"critical","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"critical"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-85185","advisory_id":"3204e17a-266e-41a8-906c-3df1ecd61aee","event_types":["advisory"],"published_at":"2026-10-24T21:31:20.631531+00:00","technologies":["core-cve","lxd"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-28T13:21:51.596+00:00","detail_url":"/events/3208"}]}}],"next_after":3391,"next_before":3197}