CVE-2026-28385

Katalog CVE

CVSS 5.0 · Medium EPSS 0,28%

Kerentanan Server-Side Request Forgery (SSRF) pada canonical lxd. Skor CVSS 3.1 5.0 (Medium) menurut ubuntu.com.

Deskripsi (NVD)

In Canonical LXD versions 4.12 through 6.9, a Server-Side Request Forgery (SSRF) vulnerability in the image import functionality allows authenticated users with the can_create_images entitlement to interact with internal network infrastructure via the /images endpoint. When importing an image from a URL source, the LXD daemon fails to validate or restrict outbound destination IP addresses, allowing connections to loopback, RFC1918 private ranges, and cloud metadata endpoints. This enables error-based port scanning and unauthorized interaction with internal HTTP services from the daemon's network position.

Rincian

Terbit di NVD

26 Juni 2026

Terakhir diubah

6 Juli 2026

Status NVD

Analyzed

CVSS 3.1

5.0 (Medium), sumber ubuntu.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 18,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/canonical/lxd/security/advisories/GHSA-3gq2-x4qg-p4g6 exploit · advisory vendor · mitigasi
• https://github.com/canonical/lxd/pull/18462 issue tracking · patch