CVE-2026-34179 - Vulnerability Analysis

Overview

Canonical LXD 4.12 through 6.7 contains a broken access control vulnerability caused by lack of validation of the Type field in doCertificateUpdate function during PUT/PATCH requests to /1.0/certificates/{fingerprint}, letting remote authenticated attackers escalate privileges to cluster admin, exploit requires authentication as restricted TLS certificate users.

Severity & Score

Impact

Remote authenticated attackers can escalate privileges to cluster admin, gaining full control over the cluster.

Mitigation

Update to a version later than 6.7 or the latest available version.

References

• https://github.com/canonical/lxd/pull/17936
• https://github.com/canonical/lxd/security/advisories/GHSA-c3h3-89qf-jqm5

Social Media Activity(1 post)

OffSequence

@offseq

Apr 9, 2026

🚨 CRITICAL: CVE-2026-34179 in Canonical LXD 4.12 – 6.7 enables privilege escalation from restricted TLS cert user to cluster admin (CVSS 9.1). No patch yet — restrict access & monitor API activity. https://radar.offseq.com/threat/cve-2026-34179-cwe-915-improperly-controlled-modif-752fa0b8 #OffSeq #LXD #PrivilegeEscalation #Vuln

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner