# Canonical LXD vulnerabilities Source: https://junglewise.ai/threats/technologies/lxd Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/lxd.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 30 vulnerabilities in Canonical LXD: 1 in the last 7 days and 10 in the last 90 days, 17 of them critical and 0 exploited in the wild. The most recent, LXD project restriction bypass in instance copy, was published on 6 November 2026. 2 vulnerabilities in the last four weeks, down 71% on the four before (7). 0 critical against 3. ## Counts - Last 7 days: 1 - Last 30 days: 2 - Last 90 days: 10 - All time: 30 (17 critical, 0 exploited in the wild) ## About Canonical LXD System container and virtual machine manager that uses LXC technology. ## Latest Canonical LXD vulnerabilities - [LXD project restriction bypass in instance copy](https://junglewise.ai/threats/lxd-has-project-restriction-bypass-in-instance-copy-across-projects-48d466e0) (high, CVSS 7.7, published 6 Nov 2026) - [CVE-2026-112816: Canonical LXD improper certificate validation in HTTPS listener](https://junglewise.ai/threats/cve-2026-112816-improper-certificate-validation-in-the-https-listener-in) (info, published 30 Oct 2026) - [CVE-2026-97335: Canonical LXD custom storage volume authorization bypass](https://junglewise.ai/threats/cve-2026-97335-incorrect-authorization-in-the-custom-storage-volume-creation) (high, CVSS 7.7, published 28 Sep 2026) - [CVE-2026-87799: Canonical LXD arbitrary file write via symlink in migration stream](https://junglewise.ai/threats/cve-2026-87799-improper-link-resolution-in-the-migration-receive-path-in) (critical, CVSS 9.9, published 28 Sep 2026) - [CVE-2026-87798: Canonical LXD improper symlink resolution in recursive file pull](https://junglewise.ai/threats/cve-2026-87798-improper-link-resolution-in-the-recursive-file-pull-feature-of) (medium, CVSS 5.8, published 28 Sep 2026) - [CVE-2026-86335: Canonical LXD missing authorization in imageDownload](https://junglewise.ai/threats/cve-2026-86335-missing-authorization-in-imagedownload-in-canonical-lxd-before-5) (medium, CVSS 6.3, published 28 Sep 2026) - [CVE-2026-86334: Canonical LXD path traversal in image export and copy](https://junglewise.ai/threats/cve-2026-86334-path-traversal-in-the-cli-client-image-export-and-copy) (medium, CVSS 4.2, published 28 Sep 2026) - [CVE-2026-85526: Canonical LXD path traversal in Btrfs storage driver](https://junglewise.ai/threats/cve-2026-85526-path-traversal-in-the-btrfs-storage-driver-unpackvolume-in) (critical, CVSS 9.9, published 28 Sep 2026) - [CVE-2026-85185: Canonical LXD path traversal in btrfs storage driver](https://junglewise.ai/threats/cve-2026-85185-path-traversal-in-the-btrfs-storage-driver-in-canonical-lxd) (critical, CVSS 9.6, published 28 Sep 2026) - [CVE-2026-66897: Canonical LXD path traversal in instance template processing](https://junglewise.ai/threats/cve-2026-66897-canonical-lxd-path-traversal-in-instance-template-processing) (critical, CVSS 9.9, published 24 Aug 2026) - [CVE-2026-66898: LXD path traversal in backup restore enables arbitrary file write](https://junglewise.ai/threats/cve-2026-66898-lxd-path-traversal-in-backup-restore-enables-arbitrary-file-write) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-16033: LXD path traversal in QEMU template processing](https://junglewise.ai/threats/cve-2026-16033-lxd-path-traversal-in-qemu-template-processing) (high, CVSS 8.5, published 12 Aug 2026) - [CVE-2026-63300: An improper validation vulnerability in the instancePostMigration function in lxd/instance_post.go of LXD allows an…](https://junglewise.ai/threats/cve-2026-63300-an-improper-validation-vulnerability-in-the-instancepostmigration) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-63299: An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume…](https://junglewise.ai/threats/cve-2026-63299-an-authorization-bypass-vulnerability-in-lxd-allows-an) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-63298: An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an…](https://junglewise.ai/threats/cve-2026-63298-an-improper-neutralization-of-special-elements-vulnerability-in) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-63297: An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allows an authenticated…](https://junglewise.ai/threats/cve-2026-63297-an-authorization-bypass-vulnerability-in-lxd-due-to-a-timing-flaw) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-63296: An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions…](https://junglewise.ai/threats/cve-2026-63296-an-authorization-bypass-vulnerability-in-lxd-allows-an) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-63295: An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container…](https://junglewise.ai/threats/cve-2026-63295-an-authorization-bypass-vulnerability-in-lxd-allows-an) (medium, CVSS 4.3, published 12 Aug 2026) - [CVE-2026-63294: A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During…](https://junglewise.ai/threats/cve-2026-63294-a-link-following-vulnerability-in-lxd-allows-an-attacker-to) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-63293: A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the…](https://junglewise.ai/threats/cve-2026-63293-a-link-following-vulnerability-in-lxd-allows-an-attacker-to) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-62420: An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project security…](https://junglewise.ai/threats/cve-2026-62420-an-authorization-bypass-vulnerability-in-lxd-allows-an) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-28385: Canonical LXD SSRF in image import functionality](https://junglewise.ai/threats/cve-2026-28385-canonical-lxd-ssrf-in-image-import-functionality) (medium, CVSS 5, published 26 Jun 2026) - [CVE-2026-9640: Canonical LXD privilege escalation via snapshot restoration in restricted projects](https://junglewise.ai/threats/cve-2026-9640-canonical-lxd-privilege-escalation-via-snapshot-restoration-in) (high, CVSS 7.2, published 26 Jun 2026) - [CVE-2026-9639: Canonical LXD denial of service via nil-pointer dereference in volume backup import](https://junglewise.ai/threats/cve-2026-9639-canonical-lxd-denial-of-service-via-nil-pointer-dereference-in) (medium, CVSS 6.5, published 26 Jun 2026) - [CVE-2026-12411: Canonical LXD broken access control in devLXDInstancePatchHandler](https://junglewise.ai/threats/cve-2026-12411-canonical-lxd-broken-access-control-in-devlxdinstancepatchhandler) (high, CVSS 8.4, published 26 Jun 2026) ## Most severe Canonical LXD vulnerabilities - [CVE-2026-63294: A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During…](https://junglewise.ai/threats/cve-2026-63294-a-link-following-vulnerability-in-lxd-allows-an-attacker-to) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-28384: Canonical LXD improper sanitization in compression_algorithm parameter](https://junglewise.ai/threats/cve-2026-28384-canonical-lxd-improper-sanitization-in-compression-algorithm) (critical, CVSS 9.9, published 12 Mar 2026) - [CVE-2026-66897: Canonical LXD path traversal in instance template processing](https://junglewise.ai/threats/cve-2026-66897-canonical-lxd-path-traversal-in-instance-template-processing) (critical, CVSS 9.9, published 24 Aug 2026) - [CVE-2026-63298: An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an…](https://junglewise.ai/threats/cve-2026-63298-an-improper-neutralization-of-special-elements-vulnerability-in) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-66898: LXD path traversal in backup restore enables arbitrary file write](https://junglewise.ai/threats/cve-2026-66898-lxd-path-traversal-in-backup-restore-enables-arbitrary-file-write) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-63299: An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume…](https://junglewise.ai/threats/cve-2026-63299-an-authorization-bypass-vulnerability-in-lxd-allows-an) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-63293: A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the…](https://junglewise.ai/threats/cve-2026-63293-a-link-following-vulnerability-in-lxd-allows-an-attacker-to) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-63300: An improper validation vulnerability in the instancePostMigration function in lxd/instance_post.go of LXD allows an…](https://junglewise.ai/threats/cve-2026-63300-an-improper-validation-vulnerability-in-the-instancepostmigration) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-62420: An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project security…](https://junglewise.ai/threats/cve-2026-62420-an-authorization-bypass-vulnerability-in-lxd-allows-an) (critical, CVSS 9.9, published 12 Aug 2026) - [CVE-2026-63296: An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions…](https://junglewise.ai/threats/cve-2026-63296-an-authorization-bypass-vulnerability-in-lxd-allows-an) (critical, CVSS 9.9, published 12 Aug 2026) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, down 71% on the four before (7). 0 critical against 3. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 1 | 1 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 7 | 3 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 1 | 0 | 0 | | 2 Nov 2026 | 1 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Canonical technologies - [Canonical Ubuntu](https://junglewise.ai/threats/technologies/ubuntu): 9 vulnerabilities - [Canonical Juju](https://junglewise.ai/threats/technologies/juju): 6 vulnerabilities - [Canonical Ubuntu-Linux](https://junglewise.ai/threats/technologies/ubuntu-20-04-lts): 6 vulnerabilities - [Canonical Apport](https://junglewise.ai/threats/technologies/apport): 4 vulnerabilities - [Canonical Snapd](https://junglewise.ai/threats/technologies/snapd): 4 vulnerabilities - [Canonical Incus](https://junglewise.ai/threats/technologies/canonical-incus): 3 vulnerabilities - [Canonical Ubuntu-Pro-Client](https://junglewise.ai/threats/technologies/ubuntu-pro-client): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Canonical LXD vulnerabilities", https://junglewise.ai/threats/technologies/lxd, 13 November 2026.