CVE-2026-63298

Περιγραφή

An improper neutralization of special elements vulnerability in LXD-s NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the -nvidia.driver.capabilities- or -nvidia.require.*- configuration values, an attacker can manipulate the generated lxc.conf file. This flaw enables the attacker to execute arbitrary code on the host system with the privileges of the LXD daemon.