---
id: 8824
title: "Old Wine in a New Bottle: A Decade-Old lxd-Group Root, Re-Armed"
source_domain: starlabs.sg
source_url: "https://starlabs.sg/blog/2026/06-old-wine-in-a-new-bottle-a-decade-old-lxd-group-root-re-armed/"
published_at: "2026-06-09T00:00:00Z"
tags: ["vulnerability-research", "linux", "privilege-escalation", "ubuntu", "lxd", "insecure-defaults", "container"]
phying_url: "https://phying.com/item/8824"
lang: en
---

# Old Wine in a New Bottle: A Decade-Old lxd-Group Root, Re-Armed

## Summary

Ubuntu Server silently puts the first user in the lxd group, root-equivalent by design. The seeded lxd-installer socket lets lxd users install LXD password-free and reach host root; vendor won't fix.

## Intelligence Metadata

- **Sources:** starlabs.sg
- **Published:** 2026-06-09T00:00:00Z
- **Original:** https://starlabs.sg/blog/2026/06-old-wine-in-a-new-bottle-a-decade-old-lxd-group-root-re-armed/
- **Phying News:** https://phying.com/item/8824