CVE-2026-112816

{
  "etk_id": "ETK-2026-3096",
  "cve_id": "CVE-2026-112816",
  "display_id": "CVE-2026-112816",
  "ghsa_id": "GHSA-99jp-jwmc-65p4",
  "euvd_id": "EUVD-2026-114194",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Certificate validation authentication bypass in LXD HTTPS listener",
  "summary": "LXD 4.0.14, 5.0.10, 5.21.8, and 6.9 have an authentication bypass in the HTTPS listener's certificate validation. An unauthenticated party that can reach this listener may impersonate a trusted client and obtain control of the cluster and its managed virtual machines.",
  "mitigation": "Upgrade LXD to 4.0.15, 5.0.11, 5.21.9, or 6.10.1, as appropriate for the deployed release line. Until upgrades are complete, limit access to the LXD HTTPS listener to trusted management networks.",
  "vendor": "Canonical",
  "product": "LXD",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 4.0.14, < 4.0.15",
        ">= 5.0.10, < 5.0.11",
        ">= 5.21.8, < 5.21.9",
        ">= 6.9.0, < 6.10.1"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "4.0.15",
        "5.0.11",
        "5.21.9",
        "6.10.1"
      ],
      "package_name": "lxd",
      "purl": null
    }
  ],
  "cwes": [
    295
  ],
  "cvss_score": 10,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 48.0703728,
  "t0_at": "2026-10-30T16:42:06.617000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-30T16:42:06.617000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-30T16:42:06.617000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112816"
    }
  }
}