GHSA-PJFF-C2WC-F6JM: CVE-2026-48769: Arbitrary File Write and Remote Code Execution via Trusted Image Hash in Canonical LXD…

Chronological Source Flow
Back

AI Fusion Summary

Three critical vulnerabilities—CVE‑2026‑48769, CVE‑2026‑48749, and CVE‑2026‑48750—impact Canonical LXD and Incus container managers. Improper validation of image hash headers and the exec‑output API permits a malicious container image to replace the instance root filesystem with a symlink to the host, granting arbitrary file writes, remote code execution, and full container escape.
Community Comments
Loading updates...
0