https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T21:02:05.848942+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-179419 EUVD-2026-179419 2026-10-18T21:02:05.852120+00:00 EUVD-2026-179419 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1340 fkie_cve-2015-1340 2026-10-18T21:02:05.852153+00:00

LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.

 https://cve.radiocsirt.org/vuln/ghsa-8mpq-fmr3-6jxv GHSA-8mpq-fmr3-6jxv — LXD vulnerable to Race Condition 2026-10-18T21:02:05.852184+00:00

Affected: Go: github.com/lxc/lxd

LXD before version 0.19-0ubuntu5 `doUidshiftIntoContainer()` has an unsafe `Chmod()` call that races against the stat in the `Filepath.Walk()` function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.

### Specific Go Packages Affected github.com/lxc/lxd/shared

 https://cve.radiocsirt.org/vuln/gsd-2015-1340 gsd-2015-1340 2026-10-18T21:02:05.852210+00:00 gsd-2015-1340