CVE-2026-63298

Received Received - Intake

Improper Neutralization in LXD NVIDIA Configuration Handling

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: Canonical Ltd.

Description

An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.*' configuration values, an attacker can manipulate the generated lxc.conf file. This flaw enables the attacker to execute arbitrary code on the host system with the privileges of the LXD daemon.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-12

Generated

2026-08-13

AI Q&A

2026-08-13

EPSS Evaluated

N/A

NVD

CVE-2026-63298

EUVD

EUVD-2026-57511

Affected Vendors & Products

Vendor	Product	Version / Range
ubuntu	lxd	*
canonical	lxd	From 4.0 (inc) to 6.9 (inc)
canonical	lxd	4.0.12
canonical	lxd	5.0.8
canonical	lxd	5.21.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper neutralization of special elements in LXD's NVIDIA instance configuration handling. An authenticated attacker can inject newline characters into specific configuration values like 'nvidia.driver.capabilities' or 'nvidia.require.*'. This manipulation allows them to alter the generated lxc.conf file, enabling execution of arbitrary code on the host system with LXD daemon privileges.

Detection Guidance

Check LXD versions between 4.0 and 6.9 for potential exposure. Inspect container configurations for suspicious nvidia.driver.capabilities values containing newline characters. Review lxc.conf files for unexpected directives like lxc.hook.pre-start.

Impact Analysis

If you use LXD with NVIDIA configurations, an attacker with instance configuration access could exploit this to escape the container and gain root access on your host system. This could lead to full system compromise, data theft, or further network infiltration depending on your environment.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Organizations using affected LXD versions may face compliance violations, potential fines, and reputational damage if exploited.

Mitigation Strategies

Apply patches for LXD versions 4.0.12, 5.0.8, or 5.21.6. Avoid granting instance configuration privileges to untrusted users. Monitor for unauthorized container restarts or unexpected hook executions.

Hi! I’m here to help you understand CVE-2026-63298. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70