# LXD 5.0.9 release notes This is a [LTS release](https://canonical.com/lxd/docs/latest/reference/releases-snap/index.html.md#ref-releases-lts) and is recommended for production use. This is a maintenance release for the 5.0 LTS series. It includes QEMU, NVIDIA package and dependency updates. ## Bug fixes The following bug fixes are included in this release. - [Instance template path traversal allows arbitrary host file write as root (CVE-2026-66897)](https://github.com/canonical/lxd/security/advisories/GHSA-q39m-8fx9-42fv) - [NVIDIA requirement expressions were not applied when configured](https://github.com/canonical/lxd/commit/887172b10ee3092e768a47b0caabd9514c2373af) ## Snap packaging changes - QEMU was bumped to version 8.2.2+ds-0ubuntu1.18. - NVIDIA Container was bumped to version 1.20.0. ## Change log View the [complete list of all changes in this release](https://github.com/canonical/lxd/compare/lxd-5.0.8...lxd-5.0.9). ## Downloads The source tarballs and binary clients can be found on our [download page](https://github.com/canonical/lxd/releases/tag/lxd-5.0.9). Binary packages are also available for: - **Linux:** `snap install lxd --channel=5.0/stable` - **macOS client:** `brew install lxc` - **Windows client:** `choco install lxc`