VULNRABLE / Vulnerability / CVE-2026-9639

CVE-2026-9639

MEDIUM LOW github.com/canonical/lxd GHSA

Exploit verdict: No active-exploit signal

CVSS Score

5.5

Severity

MEDIUM

EPSS

Source

GHSA

Summary

LXD has CreateCustomVolumeFromBackup nil-pointer dereference on volumes[0].snapshots[*].expires_at

What this means

CVE-2026-9639 is a medium-severity vulnerability affecting github.com/canonical/lxd, rated CVSS 5.5. The EPSS model estimates a 1% probability of exploitation in the next 30 days. Published November 6, 2026.

View full advisory at GHSA →