CyberRota Analysis
AI-GeneratedAn authorization bypass vulnerability in LXD enables authenticated attackers to circumvent project restrictions during instance migration, allowing them to transfer instances with unauthorized high-privilege configurations into restricted projects. This critical flaw poses significant security risks by undermining established access controls and could lead to unauthorized access to sensitive resources. Organizations using LXD should prioritize patching this vulnerability to safeguard their environments against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an instance to a target project, LXD accepts configuration overrides without validating the new configuration against the target project's enforced restrictions. An attacker can exploit this flaw to move instances with disallowed high-privilege configurations into restricted projects, bypassing security controls.