Path Traversal in LXD Instance Log File Retrieval

An authenticated attacker can read any file on the server by manipulating log file names in LXD 5.0 LTS. This bypasses normal access controls and exposes sensitive data.

Path traversal vulnerability in LXD 5.0 LTS log retrieval allows authenticated remote attackers to escape the intended log directory via crafted filenames or symlink exploitation, enabling arbitrary file read access on the host system. Requires valid authentication credentials; impacts confidentiality of all accessible files.