Log in Start free

Vulnerability · Published Sep 28, 2026 · Assigned by canonical

CVE-2026-86334CLI Path Traversal via Content-Disposition in LXD Image Export/Copy

Medium 4.2

In plain English

A medium-severity path traversal in LXD from Canonical. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).

Severity (CVSS 3.1)4.2Medium
Exploit odds (30 days)0.3%top 73.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a crafted Content-Disposition header filename parameter during unified image export or copy operations into a local directory target.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12lxdno fix listedDEBIAN-CVE-2026-86334
Debian:13lxdno fix listedDEBIAN-CVE-2026-86334

Affected products (as reported)

VendorProductVersions
Canonical LXD 4.0.2 – before 4.0.145.0.0 – before 5.0.105.21.0 – before 5.21.86.0 – before 6.10

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

References