CVE-2026-63296 in LXDthông tin

Tóm tắt

Bởi MITRE • 12/08/2026

An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an instance to a target project, LXD accepts configuration overrides without validating the new configuration against the target project's enforced restrictions. An attacker can exploit this flaw to move instances with disallowed high-privilege configurations into restricted projects, bypassing security controls.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

chịu trách nhiệm

Canonical

Đặt trước

16/07/2026

Tiết lộ

12/08/2026

Kiểm duyệt

được chấp nhận

EPSS

0.00000

KEV

không

Các hoạt động

thấp

Nguồn

Want to stay up to date on a daily basis?

Enable the mail alert feature now!