GO-2026-5576

vendorUSosv

LXD: Importing a crafted backup leads to project restriction bypass in github.com/canonical/lxd

view advisory published 2026-08-11Licence: per source

LXD: Importing a crafted backup leads to project restriction bypass in github.com/canonical/lxd

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-34178US——
In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but creates the instance from backup/contai…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan