Project Restriction Bypass in Canonical LXD Software

CVE-2026-34178

What is CVE-2026-34178?

In versions of Canonical LXD prior to 6.8, a flaw exists in the backup import process that fails to properly validate critical project restrictions. This vulnerability allows an authenticated remote attacker with permission to create instances within a restricted project to leverage a crafted backup archive. The backup.yaml file, which is responsible for configuring the instance, is not subjected to the same validation as the index.yaml file. This oversight can enable the attacker to impose unauthorized configurations such as security.privileged=true or raw.lxc directives, effectively bypassing all project restrictions and potentially leading to a full compromise of the host system.

References