THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-66898 (CRITICAL 9.9) — A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, LXD fails to validate instance and storage volume names contained within the archive metadata. An at

[NVD] CVE-2026-66898 (CRITICAL 9.9) — A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, LXD fails to validate instance and storage volume names contained within the archive metadata. An at

lownvdPublished 2026-08-12

CVE-2026-66898 CVSS: 9.9 CRITICAL Published: 2026-08-12T21:17:39.700

A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, LXD fails to validate instance and storage volume names contained within the archive metadata. An attacker can exploit this flaw by supplying a crafte

Indicators of compromise

CVE-2026-66898cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-66898