605 matches found
LXD has CreateCustomVolumeFromBackup nil-pointer dereference on volumes[0].snapshots[*].expires_at
Summary sibling-field variant of CVE-2026-40197 fix 05bc272 lxdBackend.CreateCustomVolumeFromBackup in lxd/storage/backendlxd.go contains an unguarded time.Time dereference on the ExpiresAt field of every volume-snapshot entry in an imported custom-volume backup. An authenticated user with...
7.1CVSS7AI score0.00548EPSS
SaveExploits2References12Affected Software1
20