CyberRota Analysis
AI-GeneratedA critical path traversal vulnerability in LXD allows attackers to manipulate file system paths during backup import and restore operations, enabling unauthorized access to files or overwriting data outside the intended restore directory. This flaw arises from inadequate validation of instance and storage volume names in backup archive metadata. Organizations using LXD for container management should prioritize remediation to mitigate the risk of data exposure and integrity breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, LXD fails to validate instance and storage volume names contained within the archive metadata. An attacker can exploit this flaw by supplying a crafted backup archive with malicious instance or volume names containing path traversal sequences, potentially allowing file access or overwriting outside the designated restore directory.