CVE 10.0: CVE-2026-112816, Canonical LXD, no emudhra required

> full access to the cluster and managed virtual machines via a crafted certificate chain

WebPKI is cooking lately

Does this impact Incus or is it just LXD?

"This vulnerability was referred to us from the Incus project, and was confirmed to affect LXD as well."

This only impacts LXD.

You’d be surprised who is running LXD at scale. OVH is one big name.