{"id":"EUVD-2026-20872","enisaUuid":"21ca548d-af00-38e1-acdd-df00b69dda82","description":"Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden (lxd/project/limits/permissions.go), which omits raw.apparmor and raw.qemu.conf from the set of keys blocked under the restricted.virtual-machines.lowlevel\u003dblock project restriction. A remote attacker with can_edit permission on a VM instance in a restricted project can inject an AppArmor rule and a QEMU chardev configuration that bridges the LXD Unix socket into the guest VM, enabling privilege escalation to LXD cluster administrator and subsequently to host root.","datePublished":"Apr 9, 2026, 9:15:27 AM","dateUpdated":"Apr 9, 2026, 12:12:48 PM","baseScore":9.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","references":"https://github.com/canonical/lxd/security/advisories/GHSA-fm2x-c5qw-4h6f\nhttps://github.com/canonical/lxd/pull/17909\n","aliases":"CVE-2026-34177\nGHSA-fm2x-c5qw-4h6f\n","assigner":"canonical","epss":0.36,"enisaIdProduct":[{"id":"187cbd64-7a36-3463-98ee-8e1306d2c9c8","product":{"name":"LXD","vendor":{"name":"Canonical"}},"product_version":"4.12.0 \u003c5.0.7"},{"id":"48885c6e-dc4b-3339-a668-627f6a87c9c2","product":{"name":"LXD","vendor":{"name":"Canonical"}},"product_version":"6.0.0 \u003c6.8.0"},{"id":"8e12df9d-2343-33d4-a273-9a55b5ea1913","product":{"name":"LXD","vendor":{"name":"Canonical"}},"product_version":"5.1.0 \u003c5.21.5"}],"enisaIdVendor":[{"id":"7702aced-792a-3f5a-b64b-3e921b8ff508","vendor":{"name":"Canonical"}}],"enisaIdVulnerability":[{"id":"2cdb7871-4622-3f1d-993c-38191afcb95b","vulnerability":{"id":"GHSA-fm2x-c5qw-4h6f","description":"LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf","datePublished":"Apr 10, 2026, 7:21:00 PM","dateUpdated":"Apr 10, 2026, 7:21:00 PM","baseScore":0.0,"references":"https://github.com/canonical/lxd/security/advisories/GHSA-fm2x-c5qw-4h6f\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-34177\nhttps://github.com/canonical/lxd/pull/17909\nhttps://github.com/canonical/lxd\n","enisa_id":"EUVD-2026-20872\n","aliases":"GHSA-fm2x-c5qw-4h6f\nCVE-2026-34177\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:59:37 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"3aabdd4e-0417-33d6-b193-feac5156cd21","vulnerability":{"id":"CVE-2026-34177","description":"Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden (lxd/project/limits/permissions.go), which omits raw.apparmor and raw.qemu.conf from the set of keys blocked under the restricted.virtual-machines.lowlevel\u003dblock project restriction. A remote attacker with can_edit permission on a VM instance in a restricted project can inject an AppArmor rule and a QEMU chardev configuration that bridges the LXD Unix socket into the guest VM, enabling privilege escalation to LXD cluster administrator and subsequently to host root.","datePublished":"Apr 9, 2026, 9:15:27 AM","dateUpdated":"Apr 9, 2026, 12:12:48 PM","status":"PUBLISHED","baseScore":9.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","references":"https://github.com/canonical/lxd/security/advisories/GHSA-fm2x-c5qw-4h6f\nhttps://github.com/canonical/lxd/pull/17909\n","enisa_id":"EUVD-2026-20872\n","assigner":"canonical","epss":0.36,"dataProcessed":"Nov 1, 2026, 7:19:35 AM","vulnerabilityProduct":[{"id":"57a363fe-2672-3557-b003-28b4a48b4649","product":{"name":"LXD","vendor":{"name":"Canonical"}},"product_version":"6.0.0 \u003c6.8.0"},{"id":"e51dabe9-c8b3-3f82-883d-a32f5b812e86","product":{"name":"LXD","vendor":{"name":"Canonical"}},"product_version":"4.12.0 \u003c5.0.7"},{"id":"fead8fa7-c97d-35fc-84e2-571ac3c4b749","product":{"name":"LXD","vendor":{"name":"Canonical"}},"product_version":"5.1.0 \u003c5.21.5"}],"vulnerabilityVendor":[{"id":"2373600b-a139-3106-b24e-2f2df0d001f5","vendor":{"name":"Canonical"}}]}}],"enisaIdAdvisory":[]}