CyberRota Analysis
AI-GeneratedAn authorization bypass vulnerability in LXD allows authenticated attackers to circumvent security restrictions during cross-project instance migrations, enabling them to introduce unauthorized configurations into restricted projects. This critical flaw poses a significant risk to environments utilizing LXD for container management, particularly those with strict project isolation policies. Organizations using LXD should prioritize immediate remediation to prevent potential exploitation and ensure the integrity of their project configurations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project security restrictions during cross-project instance migrations. When moving an instance cross-project to a different cluster member via POST /1.0/instances/{name} with migration: true, project: <target>, and target: <member>, the destination node skips all project restriction checks because the request arrives as an internal cluster notification. An attacker can exploit this to introduce disallowed instance configurations into a restricted project.