Security1 hOctober 17, 2026, 18:40

Two critical LXD flaws allow root file writes outside volumes

CVE-2026-87799 (CVSS 9.9) lets a symlink in a migration stream write files as root outside the target volume, while CVE-2026-85185 (CVSS 9.6) abuses an unchecked btrfs subvolume path from backup headers. LXD 4.0 and later are affected; fixes ship in 4.0.14, 5.0.10, 5.21.8 and 6.10.

DEV Community

Open source

Two critical LXD flaws allow root file writes outside volumes

CVE-2026-87799: CWE-59, CVSS 9.9, triggered via rsync or btrfs receive
CVE-2026-85185: CWE-22, CVSS 9.6, unvalidated subvolume path from headers
Optimized ZFS transfers are not affected by the symlink flaw
ZoomEye found 12,153 exposed LXD instances as of September 29, 2026

#LXD#Btrfs

CVE-2026-87799 in LXD: rsync and btrfs receive exposed, optimized ZFS not affected

Security

LXD hit by three critical flaws rated up to 9.9

Security

Dell warns of critical System Update flaw allowing root access

Security

Two critical LXD flaws allow root file writes outside volumes

CVE-2026-87799 in LXD: rsync and btrfs receive exposed, optimized ZFS not affected

LXD hit by three critical flaws rated up to 9.9

Dell warns of critical System Update flaw allowing root access

Check Point Log Servers Vulnerability CVE-2026-91843 Allows Root Code Execution