This vulnerability in Canonical LXD (versions prior to 6.8) involves improper input validation (CWE-20) during the backup import process. Specifically, while the backup import path validates project restrictions against the backup/index.yaml file in the supplied tar archive, it creates the instance from backup/container/backup.yaml, which is not validated against project restrictions. An authenticated remote attacker with instance-creation permission in a restricted project can craft a malicious backup archive where backup.yaml contains restricted settings such as security.privileged=true or raw.lxc directives. This bypasses all project restriction enforcement and can lead to full host compromise. The CVSS v3.1 score is 9.1 (critical), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, scope change, and high impact on confidentiality, integrity, and availability.

An attacker with authenticated instance-creation permissions in a restricted project can exploit this vulnerability to bypass project restrictions and apply privileged or otherwise restricted settings to container instances. This can lead to full host compromise, including complete control over the host system running LXD. The vulnerability affects LXD versions 4.12.0, 5.1.0, and 6.0.0. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently provided. Until a patch is available, restrict instance-creation permissions carefully and monitor for updates from Canonical regarding fixes or workarounds. Avoid importing backups from untrusted sources.