medium6.3
CVE-2026-86335
Missing Authorization in imageDownload in Canonical LXD before 5.0.10, 5.21.8, and 6.10 on Linux allows a project-restricted client to access private images fr…
Impact
Missing Authorization in imageDownload in Canonical LXD before 5.0.10, 5.21.8, and 6.10 on Linux allows a project-restricted client to access private images from other projects via local fingerprint reuse during image or instance import requests.
Affected products
| Product | Affected versions |
|---|---|
| Canonical LXD | before 5.0.10 |
Versions were read from the advisory text. No structured product data has been published for this record yet.