CVE-2026-66897

Name of the Vulnerable Software and Affected Versions LXD (affected versions not specified)

Description A path traversal issue exists in the instance template processing of LXD. An attacker with container edit permissions, or a user launching a specially crafted image, can overwrite arbitrary files on the host system with root privileges. The flaw occurs when processing target template paths defined in metadata.yaml; while LXD validates the path against a confined os.Root directory handle, it later uses os.Create with an unconfined string path to open and create the file. This inconsistency allows an attacker to bypass directory confinement and achieve root code execution on the host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.