LXD: SSRF via image import from URL allows internal network probing by authenticated users

🗓️ 06 Nov 2026 18:29:18Reported by GitHub Advisory DatabaseType

Authenticated users with can_create_images can use LXD image import-from-URL for SSRF.

Reporter	Title	Published	Views	Family All 18
attackerkb	CVE-2026-28385	26 Jun 202616:23	–	attackerkb
Circl	CVE-2026-28385	26 Jun 202618:50	–	circl
CVE	CVE-2026-28385	26 Jun 202616:23	–	cve
Cvelist	CVE-2026-28385 SSRF via image import from URL allows internal network probing by authenticated users	26 Jun 202616:23	–	cvelist
Debian CVE	CVE-2026-28385	26 Jun 202616:23	–	debiancve
EUVD	EUVD-2026-39805	6 Nov 202618:29	–	euvd
Mend	CVE-2026-28385	26 Jun 202616:23	–	mend
NVD	CVE-2026-28385	26 Jun 202617:16	–	nvd
osv_cve	CVE-2026-28385 SSRF via image import from URL allows internal network probing by authenticated users	26 Jun 202616:23	–	osv_cve
osv_debian	DEBIAN-CVE-2026-28385	26 Jun 202617:16	–	osv_debian

Vulners

Node

canonical lxdRange<0.0.0-20261005133302-c4a919f3f4e2go

Source	Link
github	www.github.com/canonical/lxd/security/advisories/GHSA-3gq2-x4qg-p4g6
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-28385
github	www.github.com/canonical/lxd/pull/18210
github	www.github.com/canonical/lxd/pull/18462
github	www.github.com/canonical/lxd/commit/08996fa031eebc2bc2f8e27148c2ba24386c01d0
github	www.github.com/canonical/lxd/commit/4bbdb17ab67010446668e4b00a5175df5b6d55b4
github	www.github.com/canonical/lxd/commit/5976c92117b79d73437d7fab55e34cb80083edff
github	www.github.com/canonical/lxd/commit/886fcf5b7686bf59de78e239cec90a69e8fb9c65
github	www.github.com/canonical/lxd/commit/c4a919f3f4e21249d535d4030a33484313026111
github	www.github.com/canonical/lxd/blob/lxd-6.10.0/lxd/image_source_transitional.go

06 Nov 2026 18:29Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15

EPSS0.00278

SSVC