CVE-2026-12411Published
Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, read, and overwrite another guest's custom storage volume via a crafted device PATCH request over /dev/lxd when security.…
Exact source revision recorded 5 Nov 2026 18:39:18 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-12411 · Microsoft / collected KEV context
nvd · CVE-2026-12411
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.