CVE-2026-12411Published
Broken Access Control in Canonical LXD DevLXD API
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-12411 · Microsoft / collected KEV context
cve-program · CVE-2026-12411
- https://github.com/canonical/lxd/security/advisories/GHSA-hhf9-qw4v-72xp
- https://github.com/canonical/lxd/pull/18585
euvd · EUVD-2026-39788
- https://github.com/canonical/lxd/security/advisories/GHSA-hhf9-qw4v-72xp
- https://github.com/canonical/lxd/pull/18585
- https://nvd.nist.gov/vuln/detail/CVE-2026-12411
- https://github.com/canonical/lxd/commit/752e25cfb849a349ff08939ce02747ef4d4e69cc
nvd · CVE-2026-12411
- https://github.com/canonical/lxd/pull/18585
- https://github.com/canonical/lxd/security/advisories/GHSA-hhf9-qw4v-72xp
osv · GHSA-hhf9-qw4v-72xp
- https://github.com/canonical/lxd/security/advisories/GHSA-hhf9-qw4v-72xp
- https://nvd.nist.gov/vuln/detail/CVE-2026-12411
- https://github.com/canonical/lxd/pull/18585
- https://github.com/canonical/lxd/commit/752e25cfb849a349ff08939ce02747ef4d4e69cc
- https://github.com/canonical/lxd
osv · GO-2026-6917
Related operational evidence
Explicit CVE identifiers- lxd allows Cross-guest volume hijack via DevLXD device patch · Advisory content revised · 7 Nov 2026
- LXD allows cross-guest volume hijack via DevLXD device patch in github.com/canonical/lxd · Newly collected advisory · 6 Nov 2026
- lxd allows Cross-guest volume hijack via DevLXD device patch · Advisory content revised · 6 Nov 2026
- lxd allows Cross-guest volume hijack via DevLXD device patch · Newly collected advisory · 5 Nov 2026