CVE-2026-87799

Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.0 through 4.0.13 Canonical LXD versions 5.0 through 5.0.9 Canonical LXD versions 5.21 through 5.21.7 Canonical LXD versions 6.0 through 6.9

Description Improper link resolution in the migration receive path allows an authenticated client with permissions to create instances or custom storage volumes, or a malicious migration source server, to write attacker-controlled files to arbitrary paths on the target host with root privileges. This can lead to full host compromise. The issue is triggered using a crafted rsync or btrfs send stream that plants a symlink within the transferred volume, such as rootfs or root.img, and subsequently writes through it.

Recommendations Update to version 4.0.14 Update to version 5.0.10 Update to version 5.21.8 Update to version 6.10