CVE-2026-63296

Name of the Vulnerable Software and Affected Versions LXD (affected versions not specified)

Description An authorization bypass allows an authenticated attacker to circumvent target project restrictions during instance migration. The issue occurs because LXD accepts configuration overrides without validating the new configuration against the restrictions enforced by the target project. This enables an attacker to move instances with high-privilege configurations into restricted projects, bypassing established security controls.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.