CVE-2026-86334
mediumPath traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allow…
Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a crafted Content-Disposition header filename parameter during unified image export or copy operations into a local directory target.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/canonical/lxd/pull/18940 security@ubuntu.com
- https://github.com/canonical/lxd/pull/18974 security@ubuntu.com
- https://github.com/canonical/lxd/pull/18975 security@ubuntu.com
- https://github.com/canonical/lxd/pull/18976 security@ubuntu.com
- https://github.com/canonical/lxd/pull/18977 security@ubuntu.com
- https://github.com/canonical/lxd/security/advisories/GHSA-g4cm-f533-78hq security@ubuntu.com
- https://github.com/canonical/lxd/security/advisories/GHSA-g4cm-f533-78hq 134c704f-9b21-4f2e-91b3-4a467353bcc0