Template Injection in instance snapshot creation component in Canonical LXD (>= 4.0) allows an attacker with instance configuration permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/lxc/lxd(Go) | 4.0 | 5.21.4 | N/A |
| github.com/lxc/lxd(Go) | 6.0 | 6.5 | N/A |
| github.com/lxc/lxd(Go) | 0.0.0-20200331193331-03aab09f5b5c | 0.0.0-20250827065555-0494f5d47e41 | N/A |
CVSS Metrics
