CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
LXD, MicroCloud has a critical vulnerability (CVE-2026-112816) that organizations running it need to take seriously.
LXD, MicroCloud has a critical vulnerability (CVE-2026-112816) that organizations running it need to take seriously.
This requires local or already-authenticated access to reach.
Anyone running LXD, MicroCloud 7.6.0 is exposed, specifically wherever LXD, MicroCloud is actually deployed rather than just licensed or installed somewhere unused.
What an attacker actually gains: the advisory describes a real security impact once the vulnerable path is reached.
This is tracked as CVE-2026-112816 and rated critical severity, which is the identifier to use when checking vendor guidance.
The affected versions are 7.6.0, so that's the range to check against your own deployment.
A fix for LXD, MicroCloud is already available, so upgrading is the direct remediation here.
Confirm whether LXD, MicroCloud 7.6.0 is present anywhere in your asset and software inventory.
Confirm the fixed version is actually deployed across affected assets, not just scheduled.
No exploitation has been reported yet, but that status can change, so keep watching vendor guidance while you remediate.
What happened
LXD, MicroCloud has a critical vulnerability (CVE-2026-112816) that organizations running it must take seriously.
Exploitation requires local or already-authenticated access.
Who is affected
Anyone running LXD, MicroCloud 7.6.0 is at risk, particularly in environments where LXD, MicroCloud is actively deployed rather than merely licensed or installed in an unused capacity.
Why it matters
The advisory outlines the tangible security impact an attacker can achieve once the vulnerable path is accessed.
Technical details
This vulnerability is tracked as CVE-2026-112816 and rated with critical severity, which should be referenced when reviewing vendor guidance.
The affected version is 7.6.0, so this is the version range to verify against your deployment.
Response
A fix for LXD, MicroCloud is already available, making upgrading the immediate course of action.
What security teams should do
Verify whether LXD, MicroCloud 7.6.0 exists in your asset and software inventory.
Ensure the fixed version is deployed across all affected assets, rather than just scheduled for updates.
Although no exploitation has been reported yet, this status could change, so monitor vendor guidance while you remediate.