CVEvulnerability
CVE-2026-86334
4.2 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-09-28
- Last modified
- 2026-09-28
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.2 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L
- Weaknesses
- CWE-22
Description
Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a crafted Content-Disposition header filename parameter during unified image export or copy operations into a local directory target.
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- https://github.com/canonical/lxd/pull/18940 github.com
- https://github.com/canonical/lxd/pull/18974 github.com
- https://github.com/canonical/lxd/pull/18975 github.com
- https://github.com/canonical/lxd/pull/18976 github.com
- https://github.com/canonical/lxd/pull/18977 github.com
- https://github.com/canonical/lxd/security/advisories/GHSA-g4cm-f533-78hq github.com
- https://github.com/canonical/lxd/security/advisories/GHSA-g4cm-f533-78hq github.com