{"action":"Upgrade github.com/canonical/lxd to 0.0.0-20251110144034-698854d0164f or later.","affected":[{"introduced":"0"}],"component":"github.com/canonical/lxd","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.0.0-20251110144034-698854d0164f"],"ghsa_id":"GHSA-3g2j-vm47-x4mj","id":"tcs_01M5KETT5SJKQ7JB45VNMMAEMH","modified_at":"2025-11-18T18:40:12Z","published_at":"2025-11-13T23:01:44Z","references":["https://osv.dev/vulnerability/GHSA-3g2j-vm47-x4mj","https://github.com/canonical/lxd/security/advisories/GHSA-3g2j-vm47-x4mj","https://github.com/lxc/incus/security/advisories/GHSA-56mx-8g9f-5crf","https://github.com/lxc/incus/issues/2641","https://github.com/canonical/lxd/pull/16904","https://github.com/canonical/lxd/pull/16922","https://github.com/canonical/lxd/pull/16923","https://github.com/canonical/lxd/pull/16924","https://github.com/canonical/lxd"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-3g2j-vm47-x4mj","url":"https://osv.dev/vulnerability/GHSA-3g2j-vm47-x4mj"}],"summary":"LXD vulnerable to a local privilege escalation through custom storage volumes"}