Description
An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.*' configuration values, an attacker can manipulate the generated lxc.conf file. This flaw enables the attacker to execute arbitrary code on the host system with the privileges of the LXD daemon.
Published: 2026-08-12
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is caused by improper neutralization of special elements in LXD's handling of NVIDIA instance configuration. By inserting newline characters into the 'nvidia.driver.capabilities' or 'nvidia.require.*' values, an attacker can inject arbitrary configuration directives into the generated lxc.conf file. This allows the attacker to run arbitrary code on the host with the privileges of the LXD daemon, leading to potential full system compromise.

Affected Systems

Canonical LXD releases before 4.0.12, 5.0.8, or 5.12.6 are affected.

Risk and Exploitability

The CVSS score of 8.7 indicates a high severity vulnerability. EPSS is not available, but the lack of a KEV listing suggests no known public exploits yet. The flaw requires an authenticated attacker with access to the LXD API; the attacker can manipulate the NVIDIA configuration stored by the LXD daemon, inject new directives, and execute code with daemon privileges.

Generated by OpenCVE AI on August 12, 2026 at 22:55 UTC.

Remediation

Vendor Solution

Upgrade to LXD version 4.0.12 or later, 5.0.8 or later, or 5.12.6 or later.

OpenCVE Recommended Actions

  • Upgrade Canonical LXD to ≥4.0.12, ≥5.0.8, or ≥5.12.6 depending on your release line.
  • Validate and sanitize all user-supplied NVIDIA configuration parameters to remove newline characters and other potentially malicious content before persisting them.
  • If NVIDIA support is not required, disable or remove NVIDIA instance configuration to eliminate the attack surface.

Generated by OpenCVE AI on August 12, 2026 at 22:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 13 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 12 Aug 2026 21:15:00 +0000

Type Values Removed Values Added
First Time appeared Canonical
Canonical lxd
Vendors & Products Canonical
Canonical lxd

Wed, 12 Aug 2026 19:45:00 +0000

Type Values Removed Values Added
Description An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.*' configuration values, an attacker can manipulate the generated lxc.conf file. This flaw enables the attacker to execute arbitrary code on the host system with the privileges of the LXD daemon.
Title LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration
Weaknesses CWE-78
References
Metrics cvssV3_1

{'score': 8.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}

Subscriptions

Canonical Lxd
cve-icon MITRE

Status: PUBLISHED

Assigner: canonical

Published:

Updated: 2026-08-13T14:33:57.467Z

Reserved: 2026-07-16T09:49:29.911Z

Link: CVE-2026-63298

cve-icon Vulnrichment

Updated: 2026-08-13T14:33:53.228Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-08-12T20:17:47.713

Modified: 2026-08-28T15:24:38.600

Link: CVE-2026-63298

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-12T23:00:05Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')