This vulnerability in LXD arises from improper limitation of pathname to a restricted directory (CWE-22). When processing image metadata templates, LXD fails to properly sanitize or restrict template file paths, allowing an attacker to escape the instance templates directory. By supplying a malicious image archive with crafted template directives containing path traversal sequences, an attacker can cause LXD to read or write files outside the intended directory on the host system. This affects virtual machine and QEMU driver execution paths in LXD versions 4.0.0, 5.0.0, and all versions from 4.0.0 up to but not including 4.0.12, and from 5.0.0 up to but not including 5.0.8.

Successful exploitation can lead to arbitrary host file read, potentially exposing sensitive information, and unconstrained file creation outside the intended directory, which may allow limited host file modification. The CVSS score is 8.5 (high severity) with impact on confidentiality (high), integrity (low), and no impact on availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is indicated in the provided data. Users should monitor Canonical's advisories for patches addressing this vulnerability and avoid processing untrusted image archives with LXD until a fix is available.