CVE-2026-63298Host RCE via configuration injection in LXD
An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.*' configuration values, an attacker can manipulate the generated lxc.conf file. This flaw enables the attacker to execute arbitrary code on the host system with the privileges of the LXD daemon.
View on NVDAnalysis
A critical vulnerability in LXD allows users with instance configuration access to escape to the host system. By injecting newline characters in NVIDIA configuration directives, an attacker can execute arbitrary code as root on the host machine. Infrastructure teams using LXD for multi-tenant or GPU workloads should update immediately.
Relevant roles
Severity
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HCWE-78EPSS
No EPSS score yet (CVE may be too fresh).
Technical description
An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.*' configuration values, an attacker can manipulate the generated lxc.conf file. This flaw enables the attacker to execute arbitrary code on the host system with the privileges of the LXD daemon.