Critical Security Update for LXD: Addressing Multiple Vulnerabilities
Summary
DSA-6188-1: lxd - security update. Affects lxd versions < 5.0.2-5+deb12u4. Fixed in 5.0.2-5+deb12u4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
LXD is a system container manager that provides a user-friendly interface for managing Linux containers. It allows users to create, manage, and run containers with ease, offering features such as live migration, snapshots, and image management. However, recent vulnerabilities have been identified that could compromise the security of systems running LXD, making it crucial for users to stay updated with the latest patches.
Vulnerability Detail
The vulnerabilities identified in LXD, including CVE-2026-28384, CVE-2026-33542, and CVE-2026-33897, stem from flaws in the container management functionalities. These vulnerabilities could allow unauthorized access to sensitive data, privilege escalation, or even remote code execution, potentially leading to severe security breaches. It is essential for users to understand the implications of these vulnerabilities and take appropriate action to safeguard their systems.
How To Fix
Minimum fixed version
5.0.2-5+deb12u4
This is the first release that contains the fix.
sudo apt-get install --only-upgrade lxdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, users can mitigate risks by restricting access to the LXD service and ensuring that only trusted users have permissions to manage containers. Additionally, monitoring logs for unusual activity can help identify potential exploitation attempts.
Conclusion
In summary, the recent vulnerabilities in LXD pose significant security risks that require immediate attention. Users are strongly advised to update their installations to the latest patched versions to protect their systems from potential exploitation. Utilizing tools like Vulert can further enhance security by providing real-time monitoring for open-source vulnerabilities.
See every vulnerability recorded for lxd →
FAQ
The main vulnerabilities include CVE-2026-28384, CVE-2026-33542, and CVE-2026-33897, which could lead to unauthorized access and privilege escalation.
You can use Vulert, which monitors open-source vulnerabilities in real-time. Simply upload your manifest file like package-lock.json to check for vulnerabilities.
If you cannot update immediately, restrict access to the LXD service and monitor logs for any suspicious activity.
Detailed information can be found in the Debian security advisory DSA-6188-1 and the associated CVE entries.
Yes, using Vulert's playground, you can check your application for vulnerabilities without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for lxd.
