{"vulnerability": "cve-2026-66897", "sightings": [{"uuid": "dbcd4e6b-7644-4450-9c49-18d8bfdbe0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mttf2eskfm2m", "content": "LXD\u306e\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u51e6\u7406\u306b\u304a\u3051\u308b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30b3\u30f3\u30c6\u30ca\u7de8\u96c6\u6a29\u9650\u3092\u6301\u3064\u653b\u6483\u8005\u306a\u3069\u304c\u30db\u30b9\u30c8\u4e0a\u306e\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092root\u6a29\u9650\u3067\u4e0a\u66f8\u304d\u53ef\u80fd\u3002\nCVE-2026-66897 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-08-24T13:13:31.814435Z"}, {"uuid": "0927dbbf-d4c8-449b-83ad-9f209f959067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv2iskti32f", "content": "CVE-2026-66897\nLXD's container template feature can be tricked into writing any file on the host machine, even system files that require administrator rights. An attacker who can edit containers or launch a specially crafted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T05:10:04.659540Z"}, {"uuid": "7b3cb980-9e7b-49ca-aced-d84c0d126b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtszokro2q2f", "content": "CVE-2026-66897 - lxd\nLXD\u2019s template feature can be tricked into writing any file on the underlying server, even system files that require administrator rights. An attacker who can edit containers or launch a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxd #canonical #CVE #infosec", "creation_timestamp": "2026-08-24T09:50:04.413724Z"}, {"uuid": "495018b1-6fd6-495a-a05a-f7b274635eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-66897", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117150018844317018", "content": "CVE-2026-66897: Canonical LXD CRITICAL path traversal (CVSS 9.9). Attackers with container edit rights or crafted images can overwrite host files as root. Restrict permissions & avoid untrusted images. Patch status unknown. https://radar.offseq.com/threat/cve-2026-66897-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-b6ae23dfc47f5562 #OffSeq #LXD #CVE #Linux", "creation_timestamp": "2026-08-24T10:30:26.907417Z"}, {"uuid": "3121193f-78cb-4676-9f78-2413873f38de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-66897", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtt3wsm2db2f", "content": "CRITICAL vuln in Canonical LXD (CVE-2026-66897, CVSS 9.9) lets users with container edit rights or crafted images overwrite host files as root. Restrict permissions, avoid untrusted images. https://radar.offseq.com/threat/cve-2026-66897-cwe-22-improper-limitation-of-a-pathname-to-a-restricted-dir...", "creation_timestamp": "2026-08-24T10:30:29.273736Z"}, {"uuid": "13651b90-39d8-42cc-969a-bf1cb97bcca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66897", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mttbdppb5v2j", "content": "\ud83d\udea8 CVE-2026-66897 \u2014 CVSS 9.9 CRITICAL\n\nA path traversal vulnerability in LXD's instance template processing allows an attacker with container edit...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-66897\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T12:07:10.247871Z"}]}