CVE-2026-112816— Improper certificate validation in the HTTPS listener in LXD

Quick assessment

Affected

Canonical LXD

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Canonical LXD 4.0.14、5.0.10、5.21.8 和 6.9（低于 4.0.15、5.0.11、5.21.9 和 6.10.1 的版本）中，HTTPS 监听器存在证书验证不当漏洞。该漏洞允许未认证的攻击者通过构造恶意证书链，伪装成任意受信任的客户端进行认证，从而获得对整个集群及所管理虚拟机的完全访问权限。

CVSS 10.0 · Critical Updated Oct 31, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 4

Vendor	Product	Version Range	Status
Canonical	LXD	`4.0.14< 4.0.15`	affected
		`5.0.10< 5.0.11`	affected
		`5.21.8< 5.21.9`	affected
		`6.9.0< 6.10.1`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Improper certificate validation in the HTTPS listener in LXD

Source: CVE Program / CVE List V5

Vulnerability Description

Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 allows an unauthenticated attacker to authenticate as any trusted client and gain full access to the cluster and managed virtual machines via a crafted certificate chain.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Source: CVE Program / CVE List V5

Vulnerability Type

证书验证不恰当

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Canonical	LXD	4.0.14 ~ 4.0.15	-

II. Public POCs for CVE-2026-112816

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-112816

请登录查看更多情报信息。

Other References for CVE-2026-112816 (6)

LXD 6.10.1 LTS has been released - LXD / News - Ubuntu Discourse release-notes
Page not found · GitHub · GitHub vendor-advisory
LXD 5.21.9 LTS has been released - LXD / News - Ubuntu Discourse release-notes
LXD 4.0.15 LTS has been released - LXD / News - Ubuntu Discourse release-notes
LXD 5.0.11 LTS has been released - LXD / News - Ubuntu Discourse release-notes
Security advisory: Critical vulnerability found in Canonical LXD and MicroCloud - LXD / News - Ubuntu Discourse vendor-advisory

https://www.cve.org/CVERecord?id=CVE-2026-112816

IV. Related Vulnerabilities

Same product: LXD

Same vendor: Canonical

Same weakness: CWE-295