---
id: CVE-2026-63294
title: >-
  A link following vulnerability in LXD allows an attacker to achieve root
  command execution on the host system
summary: >-
  A link following vulnerability in LXD allows an attacker to achieve root
  command execution on the host system. During the import or unpacking of
  crafted image or backup archives, LXD fails to properly validate and confine
  the backup.yaml…
severity: critical
cvss: 9.9
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
cwe:
  - CWE-59
vendor: canonical
product: lxd
affected:
  - 'lxd >= 4.0.0, < 4.0.12'
  - 'lxd >= 5.0.0, < 5.0.8'
  - 'lxd >= 5.1, < 5.21.6'
  - 'lxd >= 6.0, < 6.10'
patched:
  - lxd 6.10
published: '2026-08-12'
updated: '2026-09-11'
sourceUpdated: '2026-09-11T15:11:30.647'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-63294'
references:
  - url: 'https://github.com/canonical/lxd/security/advisories/GHSA-fv82-v4fj-mm4m'
    label: security@ubuntu.com
  - url: 'https://github.com/canonical/lxd/security/advisories/GHSA-fv82-v4fj-mm4m'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.01213
epssPercentile: 0.66702
ingestedAt: '2026-09-11T17:50:33.510Z'
---

## Overview

A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the import or unpacking of crafted image or backup archives, LXD fails to properly validate and confine the backup.yaml file when it exists as a symbolic link. An attacker can exploit this flaw by providing a malicious archive with a symlinked backup.yaml file, causing LXD to process unconfined configuration metadata and execute arbitrary commands with root privileges.

## Affected

- `lxd >= 4.0.0, < 4.0.12`
- `lxd >= 5.0.0, < 5.0.8`
- `lxd >= 5.1, < 5.21.6`
- `lxd >= 6.0, < 6.10`

## Remediation

Upgrade past the affected range:

- `lxd 6.10`