This vulnerability (CWE-22) exists in Canonical LXD CLI client versions >=4.0.2 <4.0.14, >=5.0.0 <5.0.10, >=5.21.0 <5.21.8, and >=6.0 <6.10. It involves improper limitation of a pathname to a restricted directory during image export and copy operations. A remote malicious or man-in-the-middle image server can craft a Content-Disposition header with a filename parameter that causes path traversal, enabling overwriting of arbitrary local files and potential code execution on the client system.

An attacker controlling or intercepting the image server can exploit this vulnerability to overwrite arbitrary files on the client system and execute code, potentially compromising the client system's integrity and availability. The CVSS vector indicates network attack vector with high attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

Fixed versions are available: 4.0.14, 5.0.10, 5.21.8, and 6.10. Users should upgrade to these or later versions to remediate the vulnerability. No vendor advisory content was provided explicitly stating otherwise, so patching to these fixed versions is recommended.