Three critical LXD vulnerabilities, including CVE-2026-87799 (CVSS 9.9), let container users write files as root on the host. Patch to 5.21.8 or 6.10.

#LXD #LXDVulnerabilities #Canonical #ContainerSecurity #btrfs #PathTraversal #LinuxSecurity #PatchNow

CVE-2026-87799 - lxd
Versions of Canonical LXD (4.0 and newer) let a user who can create containers or a malicious migration source place specially crafted files that cause the system to write wherever they…

Too many irrelevant or confusing CVEs? Use stackflag.com

#lxd #canonical #CVE #infosec

CVE-2026-85185 - lxd
On Linux servers that run LXD with the btrfs storage type, a user who is allowed to create containers can craft a request that moves up the directory tree and makes LXD delete any file on…

Too many irrelevant or confusing CVEs? Use stackflag.com

#lxd #canonical #CVE #infosec

CVE-2026-85526 - lxd
Canonical LXD running on Linux with the Btrfs storage driver can be tricked by a specially crafted backup file. An attacker who already has permission to create containers can replace or…

Too many irrelevant or confusing CVEs? Use stackflag.com

#lxd #canonical #CVE #infosec