VULNERABILITY INTELLIGENCE

CVE-2026-12411

CVSS score8.4 HIGH
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-06-26
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Description

Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via a crafted device PATCH request over /dev/lxd when security.devlxd.management.volumes is enabled.

Weakness classification

  • CWE-639: Authorization Bypass Through User-Controlled Key
  • CWE-862: Missing Authorization

Primary references