GHSA-47w9-6r3f-938g: LXD has restricted project bypass leading to arbitrary command execution
Instance snapshots ignore the restricted.containers.lowlevel=block setting;
allowing for arbitrary command execution on the Incus server by abusing
lowlevel hooks such as raw.lxc and raw.qemu.
References
- github.com/advisories/GHSA-47w9-6r3f-938g
- github.com/canonical/lxd/commit/5aac658c888d52e3a2480a8f879799ac643fdc49
- github.com/canonical/lxd/commit/6b93b2a0c4f6f3eaf91e1e813f6875d5eb66b59b
- github.com/canonical/lxd/commit/a52e5d06a52fb7ad8862cb2a8659a8c47e446efe
- github.com/canonical/lxd/commit/cfd9f66f6af89e1fa3b3acb12bfe72f51b7f1e19
- github.com/canonical/lxd/releases/tag/lxd-5.0.7
- github.com/canonical/lxd/releases/tag/lxd-5.21.5
- github.com/canonical/lxd/security/advisories/GHSA-47w9-6r3f-938g
- github.com/lxc/incus/security/advisories/GHSA-48q5-w887-33wv
- nvd.nist.gov/vuln/detail/CVE-2026-48751
Code Behaviors & Features
Detect and mitigate GHSA-47w9-6r3f-938g with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →