CVE-2026-87799 Arbitrary file write on LXD host via symlink in migration stream

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

EUVD-2026-88260

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

CVE-2026-87799

Canonical LXD versions 4.0 and later on Linux (fixed in 4.0.14, 5.0.10, 5.21.8, and 6.10) are vulnerable to an arbitrary file write due to improper link resolution in the migration receive path. An authenticated client capable of creating instances or custom storage volumes, or a malicious migrat...

CVE-2026-85185 Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

CVE-2026-85185

Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8, and 6.10) on Linux are vulnerable to a path traversal flaw in the btrfs storage driver . An authenticated client with instance creation permissions can use crafted subvolume paths containing ../ sequences to delete arbitrary...

CVE-2026-85185 Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

CVE-2026-85185

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

CVE-2026-85526 Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD

Path traversal in the Btrfs storage driver unpackVolume in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes.path entry in backup/optimizedheader.yaml...

CVE-2026-85526 Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD

Path traversal in the Btrfs storage driver unpackVolume in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes.path entry in backup/optimizedheader.yaml...

CVE-2026-85526 Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD

Path traversal in the Btrfs storage driver unpackVolume in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes.path entry in backup/optimizedheader.yaml...

CVE-2026-85526

Path traversal in the Btrfs storage driver unpackVolume in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes.path entry in backup/optimizedheader.yaml...

CVE-2026-85526

A path traversal vulnerability exists in the Btrfs storage driver (specifically the unpackVolume function) within Canonical LXD on Linux. An authenticated user with instance creation privileges can manipulate the host filesystem as root by providing a crafted subvolumes[].path entry in backup/opt...

ROOT-APP-PYPI-CVE-2026-50271 CVE-2026-50271 in ddtrace - Patched by Root

Root has patched CVE-2026-50271 in the ddtrace package for Root:PyPI. Multiple fixed versions available...

CVE-2026-82928

mH-DEVELOPER smart home module contains a hardcoded SSH public key in /root/.ssh/authorizedkeys, serving as a potential backdoor. The SSH daemon allows root login via key authentication and starts automatically. An attacker with the matching private key can gain a root shell on any affected devic...

ROOT-APP-NPM-CVE-2023-26136 CVE-2023-26136 in tough-cookie - Patched by Root

Root has patched CVE-2023-26136 in the tough-cookie package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-42767 CVE-2026-42767 in openssl - Patched by Root

Root has patched CVE-2026-42767 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-75803 CVE-2026-75803 in openssl - Patched by Root

Root has patched CVE-2026-75803 in the openssl package for Root:Debian:12. Multiple fixed versions available...

CoreTrustDemo

Linus Henze の CoreTrust バグ CVE-2022-26766、CoreTrust は任意のルート証明書を許可します のデモ 使用方法については https://worthdoingbadly.com/coretrust/ を参照してください。...

ROOT-OS-DEBIAN-13-CVE-2026-9538 CVE-2026-9538 in perl - Patched by Root

Root has patched CVE-2026-9538 in the perl package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-82928 Undocumented access path in mH-DEVELOPER

mH-DEVELOPER smart home module contains a hardcoded SSH public key in /root/.ssh/authorizedkeys, serving as a potential backdoor. The SSH daemon allows root login via key authentication and starts automatically. An attacker with the matching private key can gain a root shell on any affected devic...