A vulnerability in LXD allows an attacker with limited project access to copy instances from projects they are not authorized to access by exploiting missing authorization checks during instance copying. This can lead to unauthorized access to secrets contained within those instances. The flaw exists because the source instance is loaded without verifying the caller's permission to view it. A proof-of-concept script demonstrates how to copy an instance from a restricted project to another project. This issue is fixed in version 0.0.0-20260630083100-c5184be310b1.