Status: UPDATED | Advisory ID: CVE-2026-63298
| CVE | CVE-2026-63298 |
| CVSS Score / Version | 9.9 (Critical) / CVSS v3.1 |
| Updated | 2026-09-11 |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| CVSS Prose | attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high. |
| Affected products | canonical lxd |
| Classified as | CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')) |
| Vendor | Product | Affected Versions | Patch Status |
|---|---|---|---|
| canonical | lxd |
| Subsystems | General OT |
| Sectors | Multiple |
An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.*' configuration values, an attacker can manipulate the generated lxc.conf file. This flaw enables the attacker to execute arbitrary code on the host system with the privileges of the LXD daemon. (NVD)
Monitor canonical's web page for any future patch releases. See vendor advisory link below.