Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions, or any user launching a crafted image, to overwrite arbitrary files on the host system as root. When processing target template paths specified in metadata.yaml, LXD validates the path against a confined os.Root directory handle but subsequently opens and creates the file using os.Create with an unconfined string path. This discrepancy between path resolution checks and file creation allows an attacker to escape directory confinement, overwrite root-owned host files, and achieve host root code execution.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-08-24 | 2 | Disclosure1General1 |
| 2026-08-25 | 1 | Patch1 |
Instance template path traversal allows arbitrary host file write as root URL: https://nvd.nist.gov/vuln/detail/CVE-2026-66897 Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9
Post summary
CVE-2026-66897 is a critical path traversal vulnerability allowing root-level file writes, and an official fix has already been released.
🚨 Critical - LXD Host Root via Template Path Traversal (CVE-2026-66897) A flaw in LXD's template processing allows a standard ../ traversal to escape root confinement. Attackers launching a crafted image or editing a container can overwrite arbitrary host files, leading to a full container escape and host root RCE. 👉 Affected: Canonical LXD versions prior to 4.0.13, 5.0.9, 5.21.7, and 6.10 | Upgrade to: 4.0.13, 5.0.9, 5.21.7, 6.10
Post summary
The announcement discloses a critical template path traversal vulnerability in LXD that permits host root RCE, and it includes upgrade guidance to mitigate the issue.
CVE-2026-66897 A path traversal vulnerability in LXD's instance template processing allows an attacker with container edit permissions, or any user launching a crafted image, to ove… https://www.cve.org/CVERecord?id=CVE-2026-66897
Post summary
The text provides a brief vulnerability description for CVE-2026-66897, noting a path traversal issue in LXD's template processing but offers no PoC, exploit, or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | canonical | lxd | - | - | - |