CVE-2026-34179 | Canonical LXD up to 5.0.6/5.21.4/6.7.x TLS Certificate lxd/certificates.go doCertificateUpdate Type dynamically-determined object attributes

A vulnerability classified as critical was found in Canonical LXD up to 5.0.6/5.21.4/6.7.x. Affected by this vulnerability is the function doCertificateUpdate of the file lxd/certificates.go of the component TLS Certificate Handler. Such manipulation of the argument Type leads to dynamically-determined object attributes.

This vulnerability is referenced as CVE-2026-34179. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.