Critical · published August 13, 2026
A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, LXD fails to validate instance and storage volume names contained within the archive metadata. An attacker can exploit this flaw by supplying a crafted backup archive with malicious instance or volume names containing path traversal sequences, potentially allowing file access or overwriting outside the designated restore directory.
| Product | Versions | Fixed in |
|---|---|---|
| canonical/lxd | ≥ 4.0.0, < 4.0.12 | 4.0.12 |
| canonical/lxd | ≥ 5.0.0, < 5.0.4 | 5.0.4 |
| canonical/lxd | ≥ 5.1, < 5.21.2 | 5.21.2 |
| canonical/lxd | all versions | — |