Description (CNA)
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an instance to a target project, LXD accepts configuration overrides without validating the new configuration against the target project's enforced restrictions. An attacker can exploit this flaw to move instances with disallowed high-privilege configurations into restricted projects, bypassing security controls.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Canonical / LXD | affected 5.0.0 before 5.0.8; affected 5.21.0 before 5.21.6; affected 6.0 before 6.10 |
CWE
CWE-863
References
ADP enrichment
No English description supplied.