This vulnerability (CWE-863) in LXD occurs because the system does not properly validate configuration overrides against the target project's restrictions when migrating instances. An authenticated attacker can exploit this to migrate instances with elevated privileges into projects that should restrict such configurations, effectively bypassing authorization controls. The CVSS 3.1 score of 9.9 reflects the critical impact on confidentiality, integrity, and availability. Affected versions include 5.0.0, 5.21.0, 6.0, and ranges >=5.0.0 <5.0.8, >=5.21.0 <5.21.6, and >=6.0 <6.10. No patch or official remediation level has been published yet, and no known exploits are reported in the wild.

Successful exploitation allows an authenticated attacker to bypass project-level security restrictions by migrating instances with unauthorized high-privilege configurations into restricted projects. This can lead to full compromise of the affected projects, impacting confidentiality, integrity, and availability of containerized workloads managed by LXD.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to authenticated users who can perform instance migrations and monitor for suspicious migration activities. Follow Canonical's advisories closely for updates on patches or mitigations.