CVE-2026-12411CWE-639CWE-862

Broken Access Control in Canonical LXD DevLXD API

High · published June 26, 2026

CVSS v3.1
8.4
EPSS
0%
Percentile
20.3
In the wild
Unconfirmed
What it is

Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via a crafted device PATCH request over /dev/lxd when security.devlxd.management.volumes is enabled.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00288 · 20.3th percentile
Weaknesses
CWE-639 · Authorization Bypass Through User-Controlled Key; CWE-862 · Missing Authorization
Published
2026-06-26T15:27Z
EPSS history
Timeline
  • 26 JUN 15:27Z
    Broken Access Control in Canonical LXD DevLXD API
    cvelistv5