Arbitrary file write on LXD host via symlink in migration stream

Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD

Instance template path traversal allows arbitrary host file write as root

Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE

Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

Root RCE via image backup.yaml symlink

Project restriction bypass via instance migration config override

Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge

LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration

Storage volume cross-project move and snapshot restore bypass project disk limits

Cross-project cluster migration bypasses project restrictions via cluster notification flag

Cross-project instance move bypasses all project restrictions allowing host command execution

Authenticated RCE via unsanitized compression_algorithm

Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root

Broken Access Control in Canonical LXD DevLXD API

Update of type field in restricted TLS certificate allows privilege escalation to cluster admin

Importing a crafted backup leads to project restriction bypass

VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf

CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI

Arbitrary file read+write on host via templates/ symlink in malicious image

Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API

Incorrect authorization in LXD storage volume API allows reading volumes from other projects

LXD Snapshot Import Privilege Escalation Vulnerability

Source Container Identification Vulnerability via cmdline Spoofing in devLXD Server

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD

An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2

Authenticated Denial of Service via Malicious Backup Tarball in LXD

Path Traversal in LXD Instance Log File Retrieval

Arbitrary File Read via Template Injection in Snapshot Patterns

LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse

LXD client recursive file pull allows directory escape via malicious VM agent

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths…

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary…

Project existence disclosure in LXD images API

Project Existence Disclosure via Error Handling in LXD Image Export

SSRF via image import from URL allows internal network probing by authenticated users

Client-Side Path Traversal in LXD-UI

Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`

Authorization Bypass in LXD GET /1.0/certificates Endpoint

CLI Path Traversal via Content-Disposition in LXD Image Export/Copy

Mark Laing discovered in LXD's PKI mode, until version 5.21.1, that a restricted certificate could be added to the trust store with its restrictions not honoured

Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store