CyberRota Analysis
AI-GeneratedLXD is vulnerable to an authorization bypass that allows authenticated attackers to circumvent project-level container isolation restrictions when the instance configuration lacks the security.idmap.isolated key. This flaw can lead to unauthorized access to container privileges, potentially compromising the security of the affected project. Organizations utilizing LXD with project-specific container restrictions should prioritize addressing this vulnerability to maintain their security posture.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges (such as enforcing restricted.containers.privilege=isolated), LXD fails to enforce the requirement if an instance configuration omits the security.idmap.isolated key. An attacker can exploit this flaw by creating or updating an instance without explicitly setting security.idmap.isolated, bypassing the target project's security constraints.