CVE-2026-63298

Name of the Vulnerable Software and Affected Versions LXD (affected versions not specified)

Description Improper neutralization of special elements in the NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By inserting newline characters into the nvidia.driver.capabilities or nvidia.require.* configuration values, an attacker can manipulate the generated lxc.conf file. This allows for arbitrary code execution on the host system with the privileges of the LXD daemon.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.