Broken privilege checks when modifying container NICs
Affected packages
pve-container
Details
A bug in the privilege checking code for bridge/VNet access when updating a container's virtual NIC allowed an authenticated attacker that can reconfigure NICs to configure a bridge/VNet that would otherwise be inaccessible.
This issue was reported privately by Yuliang Xiao.
Fixed in
- pve-container >= 6.1.17
This page reproduces the official Proxmox forum post (opens in a new tab). The original is authoritative.