Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-66897

A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions, or any user launching a crafted image, to overwrite arbitrary files on the host system as root. When processing target template paths specified in metadata.yaml, LXD validates the path against a confined os.Root directory handle but subsequently opens and creates the file using os.Create with an unconfined string path. This discrepancy between path resolution checks and file creation allows an attacker to escape directory confinement, overwrite root-owned host files, and achieve host root code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 49.9%
CVSS Severity
CVSS v3 Score 9.9
Products affected by CVE-2026-66897
  • Canonical » Lxd » Version: 0.1
    cpe:2.3:a:canonical:lxd:0.1
  • Canonical » Lxd » Version: 0.10
    cpe:2.3:a:canonical:lxd:0.10
  • Canonical » Lxd » Version: 0.11
    cpe:2.3:a:canonical:lxd:0.11
  • Canonical » Lxd » Version: 0.12
    cpe:2.3:a:canonical:lxd:0.12
  • Canonical » Lxd » Version: 0.13
    cpe:2.3:a:canonical:lxd:0.13
  • Canonical » Lxd » Version: 0.14
    cpe:2.3:a:canonical:lxd:0.14
  • Canonical » Lxd » Version: 0.15
    cpe:2.3:a:canonical:lxd:0.15
  • Canonical » Lxd » Version: 0.16
    cpe:2.3:a:canonical:lxd:0.16
  • Canonical » Lxd » Version: 0.17
    cpe:2.3:a:canonical:lxd:0.17
  • Canonical » Lxd » Version: 0.18
    cpe:2.3:a:canonical:lxd:0.18
  • Canonical » Lxd » Version: 0.19
    cpe:2.3:a:canonical:lxd:0.19
  • Canonical » Lxd » Version: 0.2
    cpe:2.3:a:canonical:lxd:0.2
  • Canonical » Lxd » Version: 0.20
    cpe:2.3:a:canonical:lxd:0.20
  • Canonical » Lxd » Version: 0.21
    cpe:2.3:a:canonical:lxd:0.21
  • Canonical » Lxd » Version: 0.22
    cpe:2.3:a:canonical:lxd:0.22
  • Canonical » Lxd » Version: 0.23
    cpe:2.3:a:canonical:lxd:0.23
  • Canonical » Lxd » Version: 0.24
    cpe:2.3:a:canonical:lxd:0.24
  • Canonical » Lxd » Version: 0.25
    cpe:2.3:a:canonical:lxd:0.25
  • Canonical » Lxd » Version: 0.26
    cpe:2.3:a:canonical:lxd:0.26
  • Canonical » Lxd » Version: 0.27
    cpe:2.3:a:canonical:lxd:0.27
  • Canonical » Lxd » Version: 0.3
    cpe:2.3:a:canonical:lxd:0.3
  • Canonical » Lxd » Version: 0.4
    cpe:2.3:a:canonical:lxd:0.4
  • Canonical » Lxd » Version: 0.5
    cpe:2.3:a:canonical:lxd:0.5
  • Canonical » Lxd » Version: 0.6
    cpe:2.3:a:canonical:lxd:0.6
  • Canonical » Lxd » Version: 0.7
    cpe:2.3:a:canonical:lxd:0.7
  • Canonical » Lxd » Version: 0.8
    cpe:2.3:a:canonical:lxd:0.8
  • Canonical » Lxd » Version: 0.8.1
    cpe:2.3:a:canonical:lxd:0.8.1
  • Canonical » Lxd » Version: 0.9
    cpe:2.3:a:canonical:lxd:0.9
  • Canonical » Lxd » Version: 2.0.0
    cpe:2.3:a:canonical:lxd:2.0.0
  • Canonical » Lxd » Version: 2.0.1
    cpe:2.3:a:canonical:lxd:2.0.1
  • Canonical » Lxd » Version: 2.0.10
    cpe:2.3:a:canonical:lxd:2.0.10
  • Canonical » Lxd » Version: 2.0.11
    cpe:2.3:a:canonical:lxd:2.0.11
  • Canonical » Lxd » Version: 2.0.12
    cpe:2.3:a:canonical:lxd:2.0.12
  • Canonical » Lxd » Version: 2.0.2
    cpe:2.3:a:canonical:lxd:2.0.2
  • Canonical » Lxd » Version: 2.0.3
    cpe:2.3:a:canonical:lxd:2.0.3
  • Canonical » Lxd » Version: 2.0.4
    cpe:2.3:a:canonical:lxd:2.0.4
  • Canonical » Lxd » Version: 2.0.5
    cpe:2.3:a:canonical:lxd:2.0.5
  • Canonical » Lxd » Version: 2.0.6
    cpe:2.3:a:canonical:lxd:2.0.6
  • Canonical » Lxd » Version: 2.0.7
    cpe:2.3:a:canonical:lxd:2.0.7
  • Canonical » Lxd » Version: 2.0.8
    cpe:2.3:a:canonical:lxd:2.0.8
  • Canonical » Lxd » Version: 2.0.9
    cpe:2.3:a:canonical:lxd:2.0.9
  • Canonical » Lxd » Version: 2.1
    cpe:2.3:a:canonical:lxd:2.1
  • Canonical » Lxd » Version: 2.10
    cpe:2.3:a:canonical:lxd:2.10
  • Canonical » Lxd » Version: 2.10.1
    cpe:2.3:a:canonical:lxd:2.10.1
  • Canonical » Lxd » Version: 2.11
    cpe:2.3:a:canonical:lxd:2.11
  • Canonical » Lxd » Version: 2.12
    cpe:2.3:a:canonical:lxd:2.12
  • Canonical » Lxd » Version: 2.13
    cpe:2.3:a:canonical:lxd:2.13
  • Canonical » Lxd » Version: 2.14
    cpe:2.3:a:canonical:lxd:2.14
  • Canonical » Lxd » Version: 2.15
    cpe:2.3:a:canonical:lxd:2.15
  • Canonical » Lxd » Version: 2.16
    cpe:2.3:a:canonical:lxd:2.16
  • Canonical » Lxd » Version: 2.17
    cpe:2.3:a:canonical:lxd:2.17
  • Canonical » Lxd » Version: 2.18
    cpe:2.3:a:canonical:lxd:2.18
  • Canonical » Lxd » Version: 2.19
    cpe:2.3:a:canonical:lxd:2.19
  • Canonical » Lxd » Version: 2.2
    cpe:2.3:a:canonical:lxd:2.2
  • Canonical » Lxd » Version: 2.20
    cpe:2.3:a:canonical:lxd:2.20
  • Canonical » Lxd » Version: 2.21
    cpe:2.3:a:canonical:lxd:2.21
  • Canonical » Lxd » Version: 2.3
    cpe:2.3:a:canonical:lxd:2.3
  • Canonical » Lxd » Version: 2.4
    cpe:2.3:a:canonical:lxd:2.4
  • Canonical » Lxd » Version: 2.4.1
    cpe:2.3:a:canonical:lxd:2.4.1
  • Canonical » Lxd » Version: 2.5
    cpe:2.3:a:canonical:lxd:2.5
  • Canonical » Lxd » Version: 2.6
    cpe:2.3:a:canonical:lxd:2.6
  • Canonical » Lxd » Version: 2.6.1
    cpe:2.3:a:canonical:lxd:2.6.1
  • Canonical » Lxd » Version: 2.6.2
    cpe:2.3:a:canonical:lxd:2.6.2
  • Canonical » Lxd » Version: 2.7
    cpe:2.3:a:canonical:lxd:2.7
  • Canonical » Lxd » Version: 2.8
    cpe:2.3:a:canonical:lxd:2.8
  • Canonical » Lxd » Version: 2.9
    cpe:2.3:a:canonical:lxd:2.9
  • Canonical » Lxd » Version: 2.9.1
    cpe:2.3:a:canonical:lxd:2.9.1
  • Canonical » Lxd » Version: 2.9.2
    cpe:2.3:a:canonical:lxd:2.9.2
  • Canonical » Lxd » Version: 2.9.3
    cpe:2.3:a:canonical:lxd:2.9.3
  • Canonical » Lxd » Version: 3.0.0
    cpe:2.3:a:canonical:lxd:3.0.0
  • Canonical » Lxd » Version: 3.0.1
    cpe:2.3:a:canonical:lxd:3.0.1
  • Canonical » Lxd » Version: 3.0.2
    cpe:2.3:a:canonical:lxd:3.0.2
  • Canonical » Lxd » Version: 3.0.3
    cpe:2.3:a:canonical:lxd:3.0.3
  • Canonical » Lxd » Version: 3.0.4
    cpe:2.3:a:canonical:lxd:3.0.4
  • Canonical » Lxd » Version: 3.1
    cpe:2.3:a:canonical:lxd:3.1
  • Canonical » Lxd » Version: 3.10
    cpe:2.3:a:canonical:lxd:3.10
  • Canonical » Lxd » Version: 3.11
    cpe:2.3:a:canonical:lxd:3.11
  • Canonical » Lxd » Version: 3.12
    cpe:2.3:a:canonical:lxd:3.12
  • Canonical » Lxd » Version: 3.13
    cpe:2.3:a:canonical:lxd:3.13
  • Canonical » Lxd » Version: 3.14
    cpe:2.3:a:canonical:lxd:3.14
  • Canonical » Lxd » Version: 3.15
    cpe:2.3:a:canonical:lxd:3.15
  • Canonical » Lxd » Version: 3.16
    cpe:2.3:a:canonical:lxd:3.16
  • Canonical » Lxd » Version: 3.17
    cpe:2.3:a:canonical:lxd:3.17
  • Canonical » Lxd » Version: 3.18
    cpe:2.3:a:canonical:lxd:3.18
  • Canonical » Lxd » Version: 3.19
    cpe:2.3:a:canonical:lxd:3.19
  • Canonical » Lxd » Version: 3.2
    cpe:2.3:a:canonical:lxd:3.2
  • Canonical » Lxd » Version: 3.20
    cpe:2.3:a:canonical:lxd:3.20
  • Canonical » Lxd » Version: 3.21
    cpe:2.3:a:canonical:lxd:3.21
  • Canonical » Lxd » Version: 3.22
    cpe:2.3:a:canonical:lxd:3.22
  • Canonical » Lxd » Version: 3.23
    cpe:2.3:a:canonical:lxd:3.23
  • Canonical » Lxd » Version: 3.3
    cpe:2.3:a:canonical:lxd:3.3
  • Canonical » Lxd » Version: 3.4
    cpe:2.3:a:canonical:lxd:3.4
  • Canonical » Lxd » Version: 3.5
    cpe:2.3:a:canonical:lxd:3.5
  • Canonical » Lxd » Version: 3.6
    cpe:2.3:a:canonical:lxd:3.6
  • Canonical » Lxd » Version: 3.7
    cpe:2.3:a:canonical:lxd:3.7
  • Canonical » Lxd » Version: 3.8
    cpe:2.3:a:canonical:lxd:3.8
  • Canonical » Lxd » Version: 3.9
    cpe:2.3:a:canonical:lxd:3.9
  • Canonical » Lxd » Version: 4.0.0
    cpe:2.3:a:canonical:lxd:4.0.0
  • Canonical » Lxd » Version: 4.0.1
    cpe:2.3:a:canonical:lxd:4.0.1
  • Canonical » Lxd » Version: 4.0.10
    cpe:2.3:a:canonical:lxd:4.0.10
  • Canonical » Lxd » Version: 4.0.11
    cpe:2.3:a:canonical:lxd:4.0.11
  • Canonical » Lxd » Version: 4.0.12
    cpe:2.3:a:canonical:lxd:4.0.12
  • Canonical » Lxd » Version: 4.0.2
    cpe:2.3:a:canonical:lxd:4.0.2
  • Canonical » Lxd » Version: 4.0.3
    cpe:2.3:a:canonical:lxd:4.0.3
  • Canonical » Lxd » Version: 4.0.4
    cpe:2.3:a:canonical:lxd:4.0.4
  • Canonical » Lxd » Version: 4.0.5
    cpe:2.3:a:canonical:lxd:4.0.5
  • Canonical » Lxd » Version: 4.0.6
    cpe:2.3:a:canonical:lxd:4.0.6
  • Canonical » Lxd » Version: 4.0.7
    cpe:2.3:a:canonical:lxd:4.0.7
  • Canonical » Lxd » Version: 4.0.8
    cpe:2.3:a:canonical:lxd:4.0.8
  • Canonical » Lxd » Version: 4.0.9
    cpe:2.3:a:canonical:lxd:4.0.9
  • Canonical » Lxd » Version: 5.0.0
    cpe:2.3:a:canonical:lxd:5.0.0
  • Canonical » Lxd » Version: 5.0.1
    cpe:2.3:a:canonical:lxd:5.0.1
  • Canonical » Lxd » Version: 5.0.2
    cpe:2.3:a:canonical:lxd:5.0.2
  • Canonical » Lxd » Version: 5.0.3
    cpe:2.3:a:canonical:lxd:5.0.3
  • Canonical » Lxd » Version: 5.0.4
    cpe:2.3:a:canonical:lxd:5.0.4
  • Canonical » Lxd » Version: 5.0.5
    cpe:2.3:a:canonical:lxd:5.0.5
  • Canonical » Lxd » Version: 5.0.6
    cpe:2.3:a:canonical:lxd:5.0.6
  • Canonical » Lxd » Version: 5.0.7
    cpe:2.3:a:canonical:lxd:5.0.7
  • Canonical » Lxd » Version: 5.0.8
    cpe:2.3:a:canonical:lxd:5.0.8
  • Canonical » Lxd » Version: 5.1
    cpe:2.3:a:canonical:lxd:5.1
  • Canonical » Lxd » Version: 5.10
    cpe:2.3:a:canonical:lxd:5.10
  • Canonical » Lxd » Version: 5.11
    cpe:2.3:a:canonical:lxd:5.11
  • Canonical » Lxd » Version: 5.12
    cpe:2.3:a:canonical:lxd:5.12
  • Canonical » Lxd » Version: 5.13
    cpe:2.3:a:canonical:lxd:5.13
  • Canonical » Lxd » Version: 5.14
    cpe:2.3:a:canonical:lxd:5.14
  • Canonical » Lxd » Version: 5.15
    cpe:2.3:a:canonical:lxd:5.15
  • Canonical » Lxd » Version: 5.16
    cpe:2.3:a:canonical:lxd:5.16
  • Canonical » Lxd » Version: 5.17
    cpe:2.3:a:canonical:lxd:5.17
  • Canonical » Lxd » Version: 5.18
    cpe:2.3:a:canonical:lxd:5.18
  • Canonical » Lxd » Version: 5.19
    cpe:2.3:a:canonical:lxd:5.19
  • Canonical » Lxd » Version: 5.2
    cpe:2.3:a:canonical:lxd:5.2
  • Canonical » Lxd » Version: 5.20
    cpe:2.3:a:canonical:lxd:5.20
  • Canonical » Lxd » Version: 5.21.0
    cpe:2.3:a:canonical:lxd:5.21.0
  • Canonical » Lxd » Version: 5.21.1
    cpe:2.3:a:canonical:lxd:5.21.1
  • Canonical » Lxd » Version: 5.21.2
    cpe:2.3:a:canonical:lxd:5.21.2
  • Canonical » Lxd » Version: 5.21.3
    cpe:2.3:a:canonical:lxd:5.21.3
  • Canonical » Lxd » Version: 5.21.4
    cpe:2.3:a:canonical:lxd:5.21.4
  • Canonical » Lxd » Version: 5.21.5
    cpe:2.3:a:canonical:lxd:5.21.5
  • Canonical » Lxd » Version: 5.21.6
    cpe:2.3:a:canonical:lxd:5.21.6
  • Canonical » Lxd » Version: 5.3
    cpe:2.3:a:canonical:lxd:5.3
  • Canonical » Lxd » Version: 5.4
    cpe:2.3:a:canonical:lxd:5.4
  • Canonical » Lxd » Version: 5.5
    cpe:2.3:a:canonical:lxd:5.5
  • Canonical » Lxd » Version: 5.6
    cpe:2.3:a:canonical:lxd:5.6
  • Canonical » Lxd » Version: 5.7
    cpe:2.3:a:canonical:lxd:5.7
  • Canonical » Lxd » Version: 5.8
    cpe:2.3:a:canonical:lxd:5.8
  • Canonical » Lxd » Version: 5.9
    cpe:2.3:a:canonical:lxd:5.9
  • Canonical » Lxd » Version: 6.0
    cpe:2.3:a:canonical:lxd:6.0
  • Canonical » Lxd » Version: 6.1
    cpe:2.3:a:canonical:lxd:6.1
  • Canonical » Lxd » Version: 6.2
    cpe:2.3:a:canonical:lxd:6.2
  • Canonical » Lxd » Version: 6.3
    cpe:2.3:a:canonical:lxd:6.3
  • Canonical » Lxd » Version: 6.4
    cpe:2.3:a:canonical:lxd:6.4
  • Canonical » Lxd » Version: 6.5
    cpe:2.3:a:canonical:lxd:6.5
  • Canonical » Lxd » Version: 6.6
    cpe:2.3:a:canonical:lxd:6.6
  • Canonical » Lxd » Version: 6.7
    cpe:2.3:a:canonical:lxd:6.7
  • Canonical » Lxd » Version: 6.8
    cpe:2.3:a:canonical:lxd:6.8
  • Canonical » Lxd » Version: 6.9
    cpe:2.3:a:canonical:lxd:6.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved