Product by Debian
Lxd
34 known vulnerabilities in Lxd (Debian), 0 of them actively exploited (CISA KEV).
Key figures
34
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
13
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-48769 | Incus has an arbitrary file write on its client due to trusted image hash | 9.9 | |
| Critical | CVE-2026-48755 | Incus has an argument injection in backup compression algorithm leading to AFW and ACE | 9.9 | |
| Critical | CVE-2026-48752 | Incus has arbitrary file read+write on host via templates/ symlink in malicious image | 9.9 | |
| Critical | CVE-2026-48750 | Incus has an arbitrary file write on host via `exec-output` symlink in crafted image | 9.9 | |
| Critical | CVE-2026-48749 | Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image | 9.9 | |
| Critical | CVE-2026-85526 | Canonical LXD: Path Traversal | 9.9 | |
| Critical | CVE-2026-48751 | Incus has a restricted project bypass leading to arbitrary command execution | 9.9 | |
| Critical | CVE-2026-28384 | Authenticated RCE via unsanitized compression_algorithm | 9.9 | |
| Critical | CVE-2026-85185 | Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root | 9.6 | |
| High | CVE-2026-23954 | Incus container image templating arbitrary host file read and write | 8.7 | |
| Critical | CVE-2026-33897 | Incus vulnerable to arbitrary file read and write through pongo templates | 10.0 | |
| High | CVE-2026-9640 | LXD Snapshot Import Privilege Escalation Vulnerability | 7.2 | |
| Critical | CVE-2026-34178 | Importing a crafted backup leads to project restriction bypass | 9.1 | |
| High | CVE-2026-23953 | Incus container environment configuration newline injection | 8.7 | |
| Medium | CVE-2026-9639 | Authenticated Denial of Service via Malicious Backup Tarball in LXD | 6.5 | |
| Critical | CVE-2026-34177 | VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf | 9.1 | |
| High | CVE-2026-55622 | Incus has a project restriction bypass in instance copy across projects | 7.7 | |
| High | CVE-2026-55621 | Incus has a project restriction bypass for custom volume copy across projects | 7.7 | |
| High | CVE-2025-54293 | Path Traversal in LXD Instance Log File Retrieval | 6.5 | |
| Critical | CVE-2026-34179 | Update of type field in restricted TLS certificate allows privilege escalation to cluster admin | 9.1 | |
| High | CVE-2026-40251 | Incus out-of-bounds panic in snapshot metadata handling allows denial of service | 6.5 | |
| High | CVE-2026-40197 | Incus nil-pointer dereference in custom volume import allows denial of service | 6.5 | |
| Medium | CVE-2026-41684 | Incus: Nil Dereferences on Restore via Malformed YAML | 6.5 | |
| High | CVE-2025-64507 | Incus vulnerable to local privilege escalation through custom storage volumes | 7.8 | |
| High | CVE-2025-54286 | CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI | 8.8 |