{"id":"EUVD-2026-39788","enisaUuid":"73dd1170-5dcd-38c0-bd19-4ae93a1bfda7","description":"Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest\u0027s custom storage volume via a crafted device PATCH request over /dev/lxd when security.devlxd.management.volumes is enabled.","datePublished":"Jun 26, 2026, 3:27:55 PM","dateUpdated":"Jun 26, 2026, 4:02:55 PM","baseScore":8.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","references":"https://github.com/canonical/lxd/security/advisories/GHSA-hhf9-qw4v-72xp\nhttps://github.com/canonical/lxd/pull/18585\n","aliases":"CVE-2026-12411\n","assigner":"canonical","epss":0.29,"enisaIdProduct":[{"id":"a22279fe-cba8-379d-b35a-496f5717a04c","product":{"name":"LXD","vendor":{"name":"Canonical"}},"product_version":"6.6 \u003c6.9"}],"enisaIdVendor":[{"id":"f6574477-45fd-3b9e-8ed8-349cf4186e08","vendor":{"name":"Canonical"}}],"enisaIdVulnerability":[{"id":"bd318864-d5eb-39b0-bd07-2c27255a672e","vulnerability":{"id":"CVE-2026-12411","description":"Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest\u0027s custom storage volume via a crafted device PATCH request over /dev/lxd when security.devlxd.management.volumes is enabled.","datePublished":"Jun 26, 2026, 3:27:55 PM","dateUpdated":"Jun 26, 2026, 4:02:55 PM","status":"PUBLISHED","baseScore":8.4,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","references":"https://github.com/canonical/lxd/security/advisories/GHSA-hhf9-qw4v-72xp\nhttps://github.com/canonical/lxd/pull/18585\n","enisa_id":"EUVD-2026-39788\n","assigner":"canonical","epss":0.29,"dataProcessed":"Nov 5, 2026, 7:20:09 AM","vulnerabilityProduct":[{"id":"f4152f90-c5f3-35e7-9e73-796120ae7f57","product":{"name":"LXD","vendor":{"name":"Canonical"}},"product_version":"6.6 \u003c6.9"}],"vulnerabilityVendor":[{"id":"0048762f-9c4e-35c1-9a08-6a28f06ba2ac","vendor":{"name":"Canonical"}}]}}],"enisaIdAdvisory":[]}