CVE 10.0: CVE-2026-112816, Canonical LXD, no emudhra required
Posted by paaloeye 12 hours ago
Comments
Comment by paaloeye 12 hours ago
> full access to the cluster and managed virtual machines via a crafted certificate chain
WebPKI is cooking lately
Comment by paaloeye 11 hours ago
-85 moderation, haven't seen that! https://news.social-protocols.org/stats?id=50310937
Comment by rpcope1 8 hours ago
Does this impact Incus or is it just LXD?
Comment by pritambaral 2 hours ago
"This vulnerability was referred to us from the Incus project, and was confirmed to affect LXD as well."
- https://discourse.ubuntu.com/t/security-advisory-critical-vu...
Comment by motionlessveloc 11 hours ago
This only impacts LXD.
Comment by schainks 7 hours ago
You’d be surprised who is running LXD at scale. OVH is one big name.
Comment by paaloeye 12 hours ago
cve.now discussion: https://news.ycombinator.com/item?id=50310926