CVE-2026-112816 Enables TLS Certificate Chain Bypass in LXD and MicroCloud Mutual TLS

The flaw resides in the server's certificate validation logic for mutual TLS. It iterates over every certificate presented in the chain and accepts the connection if any matches the trust store, instead of enforcing that the leaf certificate alone proves possession of the corresponding private key. This allows an attacker to present their own valid leaf followed by a copied trusted certificate. Network exposure requires explicit configuration of core.https_address on standalone LXD or occurs during MicroCloud cluster join operations where member certificates are exchanged in the clear.