VULNRABLE / Vulnerability / GHSA-vghh-5rfx-xhq8
GHSA-vghh-5rfx-xhq8
CRITICAL WATCH github.com/canonical/lxd GHSA
Exploit verdict: CVSS 9.5 · no EPSS data
CVSS Score
9.5
Severity
CRITICAL
EPSS
—
Source
GHSA
Summary
LXD has arbitrary file read+write on host via rootfs/ symlink in malicious image
What this means
GHSA-vghh-5rfx-xhq8 is a critical-severity vulnerability affecting github.com/canonical/lxd, rated CVSS 9.5. Published November 6, 2026.
View full advisory at GHSA →