CVE-2026-85526

LOWCVSS 9.9 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes[].path entry in backup/optimized_header.yaml during a btrfs optimized backup import.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Peaked 1d ago at 1 mentions (2026-09-28); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Referenced assets1 URL

By indicator

http://vulntracker.io/cves/CVE-2026-87799

Full discourse2 posts

VulnTracker@vuln_tracker1d
Three critical LXD flaws (CVE-2026-87799, CVE-2026-85185, CVE-2026-85526, CVSS up to 9.9) let an authenticated user with instance creation rights write or delete files on the host as root. All three abuse migration or btrfs backup import paths. Risk is highest on shared hosts where many users can create instances. No exploitation reported by Canonical. Fixed in 5.21.8, 5.0.10, 4.0.14 and the latest 6.x. Details: http://vulntracker.io/cves/CVE-2026-87799 #LXD #Canonical #CVE #InfoSec
01021245
781 followersView on X
Atlas Threat Monitoring@ThreatAtlas17h
Unpatched vulnerabilities don't stay hidden on our atlas. #CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-85526 Vendor → Unknown Severity → Critical — CVSS 9.9 Product → Unknown Date → 2026-09-28 A critical vulnerability (Path Traversal) has been disclosed affecting Unknown. Patch immediately. Powered by @Brandefense #ThreatIntel #CyberSecurity #CVE #Unknown
0000035
420 followersView on X

Explore more

Back to dashboard