{"id":"EUVD-2026-39788","enisaUuid":"73dd1170-5dcd-38c0-bd19-4ae93a1bfda7","description":"lxd allows Cross-guest volume hijack via DevLXD device patch","datePublished":"Nov 5, 2026, 5:40:59 PM","dateUpdated":"Nov 5, 2026, 5:40:59 PM","baseScore":8.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","references":"https://github.com/canonical/lxd/security/advisories/GHSA-hhf9-qw4v-72xp\nhttps://github.com/canonical/lxd/pull/18585\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-12411\nhttps://github.com/canonical/lxd/commit/752e25cfb849a349ff08939ce02747ef4d4e69cc\n","aliases":"CVE-2026-12411\nGHSA-hhf9-qw4v-72xp\n","assigner":"canonical","epss":0.24,"enisaIdProduct":[{"id":"a22279fe-cba8-379d-b35a-496f5717a04c","product":{"name":"LXD","vendor":{"name":"Canonical"}},"product_version":"6.6 \u003c6.9"}],"enisaIdVendor":[{"id":"f6574477-45fd-3b9e-8ed8-349cf4186e08","vendor":{"name":"Canonical"}}],"enisaIdVulnerability":[{"id":"770e74ad-dba2-3442-9a85-87abb2e0327c","vulnerability":{"id":"GHSA-hhf9-qw4v-72xp","description":"lxd allows Cross-guest volume hijack via DevLXD device patch","datePublished":"Nov 5, 2026, 5:40:59 PM","dateUpdated":"Nov 5, 2026, 5:40:59 PM","baseScore":0.0,"references":"https://github.com/canonical/lxd/security/advisories/GHSA-hhf9-qw4v-72xp\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-12411\nhttps://github.com/canonical/lxd/pull/18585\nhttps://github.com/canonical/lxd/commit/752e25cfb849a349ff08939ce02747ef4d4e69cc\nhttps://github.com/canonical/lxd\n","enisa_id":"EUVD-2026-39788\n","aliases":"GHSA-hhf9-qw4v-72xp\nCVE-2026-12411\n","epss":0.0,"dataProcessed":"Nov 7, 2026, 9:01:13 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"bd318864-d5eb-39b0-bd07-2c27255a672e","vulnerability":{"id":"CVE-2026-12411","description":"Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest\u0027s custom storage volume via a crafted device PATCH request over /dev/lxd when security.devlxd.management.volumes is enabled.","datePublished":"Jun 26, 2026, 3:27:55 PM","dateUpdated":"Jun 26, 2026, 4:02:55 PM","status":"PUBLISHED","baseScore":8.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","references":"https://github.com/canonical/lxd/security/advisories/GHSA-hhf9-qw4v-72xp\nhttps://github.com/canonical/lxd/pull/18585\n","enisa_id":"EUVD-2026-39788\n","assigner":"canonical","epss":0.24,"dataProcessed":"Nov 7, 2026, 7:23:43 AM","vulnerabilityProduct":[{"id":"f4152f90-c5f3-35e7-9e73-796120ae7f57","product":{"name":"LXD","vendor":{"name":"Canonical"}},"product_version":"6.6 \u003c6.9"}],"vulnerabilityVendor":[{"id":"0048762f-9c4e-35c1-9a08-6a28f06ba2ac","vendor":{"name":"Canonical"}}]}}],"enisaIdAdvisory":[]}