Description
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges (such as enforcing restricted.containers.privilege=isolated), LXD fails to enforce the requirement if an instance configuration omits the security.idmap.isolated key. An attacker can exploit this flaw by creating or updating an instance without explicitly setting security.idmap.isolated, bypassing the target project's security constraints.
Affected products
canonical: lxd
References2
- github.com/canonical/lxd/security/advisories/GHSA-7vp9-3vmp-c5jm Vendor AdvisoryExploit
- github.com/canonical/lxd/security/advisories/GHSA-7vp9-3vmp-c5jm Vendor AdvisoryExploit
Metrics
- CVSS 3.1
-
4.3
MEDIUM
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - EPSS — exploit probability
- 0% percentile: 29 · as of 12 November 2026
- CWE
- CWE-863
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.