CVE-2026-112816

EUVD-2026-114194
Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted certificate chain.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
canonicalCNA
10 CRITICAL
NETWORK
LOW
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
canonicallxd
4.0.14 ≤
𝑥
< 4.0.15
CNA
canonicallxd
5.0.10 ≤
𝑥
< 5.0.11
CNA
canonicallxd
5.21.8 ≤
𝑥
< 5.21.9
CNA
canonicallxd
6.9.0 ≤
𝑥
< 6.10.1
CNA
Common Weakness Enumeration
References
https://discourse.ubuntu.com/t/lxd-4-0-15-lts-has-been-released/90571
https://discourse.ubuntu.com/t/lxd-5-0-11-lts-has-been-released/90570/1
https://discourse.ubuntu.com/t/lxd-5-21-9-lts-has-been-released/90565/1
https://discourse.ubuntu.com/t/lxd-6-10-1-lts-has-been-released/90024
https://discourse.ubuntu.com/t/security-advisory-critical-vulnerability-found-in-canonical-lxd-and-microcloud/90557
https://github.com/canonical/lxd/security/advisories/GHSA-99jp-jwmc-65p4