CVE-2013-6441: The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mo...

Security readout for executives and security teams

This is a local privilege-escalation flaw in LXC’s lxc-sshd container template before 1.0.0.beta2. The template mounted a critical init binary with write access, so a local user could alter it and gain higher privileges. This is not a remote internet-facing issue based on the provided sources. Exposure is most likely on systems running older LXC packages or source builds that include the vulnerable lxc-sshd template. The provided record does not identify complete vendor, product, CPE, or version inventories beyond LXC before 1.0.0.beta2. Prioritize remediation on shared Linux hosts, developer platforms, and container infrastructure where local users are not fully trusted. The issue is older and local-only from the supplied evidence, but privilege escalation on shared infrastructure can materially increase incident impact. Mitigation focus: Upgrade LXC to a vendor-fixed package or version at or after 1.0.0.beta2.; Apply Ubuntu guidance from USN-2104-1 where Ubuntu packages are in use.; Restrict local access and container template use to trusted administrators until patched..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.