{"id":"CVE-2026-12411","revision":"ce404b417bb7421fa4681aedda88cf12","records":[{"revision":"ce404b417bb7421fa4681aedda88cf12","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-12411","aliases":[],"title":"Broken Access Control in Canonical LXD DevLXD API","description":"Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via a crafted device PATCH request over /dev/lxd when security.devlxd.management.volumes is enabled.","state":0,"publishedAt":"2026-06-26T15:27:55.111+00:00","modifiedAt":"2026-06-26T16:02:55.284+00:00","affected":[{"ecosystem":"https://github.com/canonical","name":"lxd","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Canonical\",\n                    \"product\": \"lxd\",\n                    \"collectionURL\": \"https://github.com/canonical\",\n                    \"packageName\": \"lxd\",\n                    \"programFiles\": [\n                        \"permissions.go\"\n                    ],\n                    \"platforms\": [\n                        \"Linux\"\n                    ],\n                    \"repo\": \"https://github.com/canonical/lxd\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"6.6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\",\n                            \"lessThan\": \"6.9\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","score":8.4,"severity":"HIGH"}],"references":["https://github.com/canonical/lxd/security/advisories/GHSA-hhf9-qw4v-72xp","https://github.com/canonical/lxd/pull/18585"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-12411","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-12411","identifiers":["CVE-2026-12411"]},"retained":false,"historicalAffected":[]}],"coverage":[]}