This vulnerability in LXD arises from improper authorization checks related to project-restriction policies during snapshot restoration. Specifically, an authenticated project operator can import a snapshot containing restricted configuration keys that bypass policy validation. When the snapshot is restored and the instance started, these unauthorized keys are applied, granting the operator root privileges on the host system. The affected versions are LXD 5.0.0 before 5.0.7, 5.21.0 before 5.21.5, and 6.0 before 6.9. The CVSS v3.1 base score is 7.2, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation results in privilege escalation from an authenticated project operator to unauthorized host root access. This compromises the host system's confidentiality, integrity, and availability, allowing full control over the host environment from within a restricted multi-tenant project.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict snapshot restoration privileges and monitor for suspicious snapshot imports in multi-tenant environments.