Vulnerability GO-2026-5576
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 months ago
August 11, 2026 at 11:21 PM UTC
LXD: Importing a crafted backup leads to project restriction bypass in github.com/canonical/lxd
v0.0.0-20261105145923-afa964e30b2c
v0.0.0-20261105145923-afa964e30b2c
Summary
LXD: Importing a crafted backup leads to project restriction bypass in github.com/canonical/lxd
Details
LXD: Importing a crafted backup leads to project restriction bypass in github.com/canonical/lxd
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
LXD allows cross-guest volume hijack via DevLXD device patch in github.com/canonical/lxd
>=0.0.0-20250721152936-fe86ceb2c3fa <0.0.0-20260626085133-7cb96ac80a6d GO-2026-6917
>=0.0.0-20250721152936-fe86ceb2c3fa <0.0.0-20260626085133-7cb96ac80a6d GO-2026-6917
High Risk
15 hours ago
lxd allows Cross-guest volume hijack via DevLXD device patch
>=0.0.0-20250721152936-fe86ceb2c3fa <0.0.0-20260626085133-7cb96ac80a6d GHSA-hhf9-qw4v-72xp
>=0.0.0-20250721152936-fe86ceb2c3fa <0.0.0-20260626085133-7cb96ac80a6d GHSA-hhf9-qw4v-72xp
Unknown
2 months ago
Type field in restricted TLS certificate allows privilege escalation in github.com/canonical/lxd
v0.0.0-20261105145923-afa964e30b2c GO-2026-5306
v0.0.0-20261105145923-afa964e30b2c GO-2026-5306
Unknown
2 months ago
VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf in github.com/canonical/lxd
v0.0.0-20261105145923-afa964e30b2c GO-2026-5368
v0.0.0-20261105145923-afa964e30b2c GO-2026-5368
Critical
6 months ago
LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf
>=0.0.0-20210305023314-538ac3df036e <=0.0.0-20260226085519-736f34afb267 GHSA-fm2x-c5qw-4h6f
>=0.0.0-20210305023314-538ac3df036e <=0.0.0-20260226085519-736f34afb267 GHSA-fm2x-c5qw-4h6f
Impacted packages
Timeline
Published
2 months ago
August 11, 2026 at 11:21 PM UTC
Last Modified
2 months ago
August 11, 2026 at 11:45 PM UTC