📦

lxd

Vendor: canonical

Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 38 Total Indexed
Avg. EPSS 0.28% Exploit Prob.
Latest CVE CVE-2026-28385 Jun 26

Security Vulnerability Index

Page 3 / 4
5.5 CVSS

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors.

EPSS: 0.35%
5.5 CVSS

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors.

EPSS: 0.30%