CVE-2026-63296

CVE-2026-63296 describes an authorization bypass in LXD where, during instance migration to a target project, the system accepts configuration overrides without validating against the target project’s enforced restrictions. This allows an authenticated attacker (network vector, low attack complex...