by Kastro
Paper/Archive/CVE-2026-112816

CVE-2026-112816

Canonical LXD — Improper certificate validation in the HTTPS listener in LXD

CVSS 10.0
critical.is priorityof 100
30
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted certificate chain.

Affected

ProductAffectedFixed inSource
LXD4.0.14 – < 4.0.154.0.15CNA
LXD5.0.10 – < 5.0.115.0.11CNA
LXD5.21.8 – < 5.21.95.21.9CNA
LXD6.9.0 – < 6.10.16.10.1CNA

Scores by source

canonical (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorygithub.com/canonical/lxd/security/advisories/GHSA-99jp-jwmc-65p4advisorydiscourse.ubuntu.com/t/security-advisory-critical-vulnerability-found-in-canonical-lxd-and-microcloud/90557refdiscourse.ubuntu.com/t/lxd-6-10-1-lts-has-been-released/90024refdiscourse.ubuntu.com/t/lxd-5-21-9-lts-has-been-released/90565/1refdiscourse.ubuntu.com/t/lxd-5-0-11-lts-has-been-released/90570/1refdiscourse.ubuntu.com/t/lxd-4-0-15-lts-has-been-released/90571