CVE-2026-9640
LXD Snapshot Import Privilege Escalation Vulnerability
Description
A privilege escalation vulnerability exists in LXD from 6.0 before 6.9, 5.21.0 before 5.21.5, and 5.0.0 before 5.0.7 regarding the handling of project-restriction policies during snapshot restoration.. An authenticated project operator in a restricted multi-tenant environment can bypass policy restrictions by importing a maliciously crafted instance backup containing restricted configuration keys within a snapshot. When the snapshot is restored, these restricted keys are applied to the live instance without policy validation. Starting the modified instance grants the operator unauthorized host root access.
INFO
Published Date :
June 26, 2026, 3:50 p.m.
Last Modified :
June 26, 2026, 3:50 p.m.
Remotely Exploit :
Yes !
Source :
canonical
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | HIGH | cc1ad9ee-3454-478d-9317-d3e869d708bc |
Solution
- Update LXD to version 6.9 or later.
- Update LXD to version 5.21.5 or later.
- Update LXD to version 5.0.7 or later.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-9640 vulnerability anywhere in the article.