{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0-20210305023314-538ac3df036e","last_affected":"0.0.0-20260226085519-736f34afb267"}],"component":"github.com/canonical/lxd","cve_ids":["CVE-2026-34179"],"ecosystem":"Go","epss":0.00274,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-c3h3-89qf-jqm5","id":"tcs_01M5KF6KF2D8ZMHYH31YNNEJC6","modified_at":"2026-08-11T23:55:35.885323889Z","published_at":"2026-04-10T19:20:50Z","references":["https://osv.dev/vulnerability/GHSA-c3h3-89qf-jqm5","https://github.com/canonical/lxd/security/advisories/GHSA-c3h3-89qf-jqm5","https://nvd.nist.gov/vuln/detail/CVE-2026-34179","https://github.com/canonical/lxd/pull/17936","https://github.com/canonical/lxd"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-c3h3-89qf-jqm5","url":"https://osv.dev/vulnerability/GHSA-c3h3-89qf-jqm5"}],"summary":"LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin"}