Authorization Bypass in LXD Affects Canonical's Container Management

CVE-2026-63295

What is CVE-2026-63295?

An authorization bypass vulnerability in LXD enables an authenticated attacker to override project-level container isolation restrictions. This flaw arises when a project enforces restrictions on container privileges but fails to enforce these constraints if an instance configuration does not specify the security.idmap.isolated key. Consequently, an attacker can exploit this vulnerability to create or modify an instance without explicitly setting required isolation parameters, effectively circumventing the project's intended security measures.

References