CVE-2026-66898

A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, LXD fails to validate instance and storage volume names contained within the archive metadata. An attacker can exploit this flaw by supplying a crafted backup archive with malicious instance or volume names containing path traversal sequences, potentially allowing file access or overwriting outside the designated restore directory.

• CWE-22

• https://github.com/canonical/lxd/security/advisories/GHSA-m857-c7gc-c984Vendor Advisory, Exploit, Mitigation
• https://github.com/canonical/lxd/security/advisories/GHSA-m857-c7gc-c984Vendor Advisory, Exploit, Mitigation

Published

Aug 12, 2026

Last Modified

Sep 11, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-66884Cross-Site Request Forgery vulnerability in Erlang Ecosystem…2.1
• CVE-2026-66885Cross-Site Request Forgery (CSRF) vulnerability in livebook-…6.5
• CVE-2026-66887The affected products are missing authorization on state-cha…9.6
• CVE-2026-6689Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.1…4.3
• CVE-2026-66890The affected products use hard-coded credentials, which coul…9.6
• CVE-2026-66897A path traversal vulnerability in LXD's instance template pr…9.9
• CVE-2026-6690The LifePress plugin for WordPress is vulnerable to Stored C…7.2
• CVE-2026-66901Google::Auth versions before 0.09 for Perl allow server side…7.5
• CVE-2026-66902Google::Auth versions before 0.06 for Perl run a command nam…9.8
• CVE-2026-66906Relative path traversal vulnerability in Apache Camel Azure …9.1
• CVE-2026-66907Relative path traversal vulnerability in Apache Camel Google…7.5
• CVE-2026-66908Improper Authentication vulnerability in Apache Camel Platfo…7.5