4 matches found
CVE-2026-63299
CVE-2026-63299 is a concrete issue in LXD where an authenticated user can bypass project-level disk and volume limits. The vulnerability arises from two code paths: (1) storagePoolVolumeTypePostMove does not perform limits.AllowVolumeCreation when moving a volume across projects, and (2) volume s...
EUVD-2026-57418
An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...
CVE-2026-63299 Storage volume cross-project move and snapshot restore bypass project disk limits
An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...
CVE-2026-63299 Storage volume cross-project move and snapshot restore bypass project disk limits
An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before...