Skip to content
OpenAdvisories

Package · Ubuntu

lxd

81 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-48756

    Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)

    Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).CreateCustomVolumeFromBackup` in `internal/server/storage/backend.go` contains an unguarded `*time.Time` dereference on the `ExpiresAt` field of every volume-snapshot…

    lxc incus lxd incus Debian Ubuntu Alpine Go
  • Low 2.1
    CVE-2026-3351

    Authorization Bypass in LXD GET /1.0/certificates Endpoint

    Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server.

    Canonical LXD lxd github.com/canonical/lxd Ubuntu Go
  • Low 3.8
    CVE-2024-6219

    lxd has a restricted TLS certificate privilege escalation when in PKI mode

    Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured.

    Canonical LXD lxd github.com/canonical/lxd Ubuntu Go
  • Low 3.8
    CVE-2024-6156

    lxd CA certificate sign check bypass

    Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store.

    Canonical LXD lxd incus Debian Ubuntu Go