A vulnerability in LXD allows a specially crafted container image with a malicious rootfs symlink to perform arbitrary file read and write operations on the host filesystem. This occurs because the image validation process does not properly handle duplicate top-level rootfs symlinks, enabling root-level access to the host. The flaw can lead to arbitrary command execution on the host system.