https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:57:55.736482+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351894 EUVD-2026-351894 2026-10-02T10:57:55.777307+00:00 EUVD-2026-351894 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63293 fkie_cve-2026-63293 2026-10-02T10:57:55.777340+00:00

A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking an image archive, LXD fails to validate whether the metadata.yaml file is a symbolic link. An attacker can exploit this flaw by providing a crafted image archive with a symlinked metadata.yaml file pointing to target file paths on the host system.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21788-1 openSUSE-SU-2026:21788-1 — Security update for lxd 2026-10-02T10:57:55.777371+00:00

Security update for lxd

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-63293 UBUNTU-CVE-2026-63293 2026-10-02T10:57:55.777392+00:00

Affected: Ubuntu:Pro:16.04:LTS: lxd, Ubuntu:Pro:18.04:LTS: lxd, Ubuntu:20.04:LTS: lxd

A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking an image archive, LXD fails to validate whether the metadata.yaml file is a symbolic link. An attacker can exploit this flaw by providing a crafted image archive with a symlinked metadata.yaml file pointing to target file paths on the host system.