Skip to content
Lxc vulnerabilities
Newest
-
lxc incus
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull
CVE-2026-115378
Fix available
6.9 Medium
-
lxc incus
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream
CVE-2026-115377
Fix available
9.4 Critical
-
lxc incus
Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy
CVE-2026-115376
Fix available
8.3 High
-
lxc incus
Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes
CVE-2026-115375
Fix available
9.4 Critical
-
lxc incus
Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLs
CVE-2026-115374
Fix available
7.1 High
-
lxc incus
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid}
CVE-2026-115373
Fix available
7.0 High
-
lxc incus
Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options
CVE-2026-115372
Fix available
9.0 Critical
-
lxc incus
LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpoints
CVE-2026-115371
Fix available
7.1 High
-
lxc incus
Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh
CVE-2026-115370
Fix available
5.3 Medium
-
lxc
LXC: lxc-copy host-context hostname update follows symlink
CVE-2026-100395
6.8 Medium
-
lxc lxc-ci
lxc-ci: Pacman keyring stored in archlinux image with a private key
CVE-2026-52727
Fix available
7.2 High
-
lxc incus
Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root
CVE-2026-63343
Fix available
9.9 Critical
-
lxc incus
Incus vulnerable to root RCE via image backup.yaml symlink
CVE-2026-63125
Fix available
9.9 Critical
-
lxc incus
Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge
CVE-2026-62941
Fix available
9.9 Critical
-
lxc incus
Incus has a project restriction bypass via instance migration config override
CVE-2026-62940
Fix available
9.9 Critical
-
lxc incus
Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution
CVE-2026-62867
Fix available
9.9 Critical
-
lxc incus
Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`
CVE-2026-62313
Fix available
4.3 Medium
-
lxc incus
Incus has a project restriction bypass in instance copy across projects
CVE-2026-55622
Fix available
7.7 High
-
lxc incus
Incus has a project restriction bypass for custom volume copy across projects
CVE-2026-55621
Fix available
7.7 High
-
lxc incus
Incus has an arbitrary file write on its client due to trusted image hash
CVE-2026-48769
Fix available
9.9 Critical
-
lxc incus
Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)
CVE-2026-48756
Fix available
2.1 Low
-
lxc incus
Incus has an argument injection in backup compression algorithm leading to AFW and ACE
CVE-2026-48755
Fix available
9.9 Critical
-
lxc incus
Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}
CVE-2026-48754
Fix available
2.1 Low
-
lxc incus
Incus has an arbitrary file write via path traversal in S3 multipart upload
CVE-2026-48753
Fix available
9.9 Critical
-
lxc incus, canonical lxd +1 more
Incus has arbitrary file read+write on host via templates/ symlink in malicious image
CVE-2026-48752
Fix available
9.9 Critical
-
lxc incus
Incus has a restricted project bypass leading to arbitrary command execution
CVE-2026-48751
Fix available
9.9 Critical
-
lxc incus
Incus has an arbitrary file write on host via `exec-output` symlink in crafted image
CVE-2026-48750
Fix available
9.9 Critical
-
lxc incus, canonical lxd +1 more
Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image
CVE-2026-48749
Fix available
9.9 Critical
-
lxc incus
Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted)
CVE-2026-47753
Fix available
4.4 Medium
-
linuxcontainers incus
Incus: Unbounded binary import disk exhaustion
CVE-2026-41685
Fix available
4.3 Medium
-
linuxcontainers incus
Incus: Nil Dereferences on Restore via Malformed YAML
CVE-2026-41684
Fix available
6.5 Medium
-
linuxcontainers incus
Incus: Unbounded YAML Metadata Decode via Parsing
CVE-2026-41648
Fix available
5.3 Medium
-
linuxcontainers incus
Incus: Nil-Pointer Dereference via S3 Bucket Import
CVE-2026-41647
Fix available
6.5 Medium
-
linuxcontainers incus
Incus out-of-bounds panic in snapshot metadata handling allows denial of service
CVE-2026-40251
Fix available
7.1 High
-
linuxcontainers incus
Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation
CVE-2026-40243
Fix available
2.3 Low
-
linuxcontainers incus
Incus nil-pointer dereference in custom volume import allows denial of service
CVE-2026-40197
Fix available
7.1 High
-
linuxcontainers incus
Incus nil-pointer dereference in storage bucket import allows denial of service
CVE-2026-40195
Fix available
7.1 High
-
linuxcontainers incus
Incus blind SSRF via image import preflight HEAD request
CVE-2026-35527
Fix available
5.3 Medium
-
linuxcontainers lxc
lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion
CVE-2026-39402
Fix available
4.3 Medium
-
linuxcontainers incus
Abitrary file write through systemd-creds option
CVE-2026-33945
Fix available
10.0 Critical
-
linuxcontainers incus
Local Incus UI web server vulnerable to nuthentication bypass
CVE-2026-33898
Fix available
8.8 High
-
linuxcontainers incus
Incus vulnerable to arbitrary file read and write through pongo templates
CVE-2026-33897
Fix available
10.0 Critical
-
linuxcontainers incus
Incus vulnerable to denial of source through crafted bucket backup file
CVE-2026-33743
Fix available
6.5 Medium
-
linuxcontainers incus
Incus vulnerable to local privilege escalation through VM screenshot path
CVE-2026-33711
Fix available
4.7 Medium
-
linuxcontainers incus
Incus does not verify combined fingerprint when downloading images from simplestreams servers
CVE-2026-33542
Fix available
5.7 Medium
-
lxc incus-os
IncusOS has a LUKS encryption bypass due to insufficient TPM policy
CVE-2026-32606
Public exploitFix available
7.7 High
-
linuxcontainers incus
Incus container image templating arbitrary host file read and write
CVE-2026-23954
Fix available
8.7 High
-
linuxcontainers incus
Incus container environment configuration newline injection
CVE-2026-23953
Fix available
8.7 High
-
linuxcontainers incus
Incus vulnerable to local privilege escalation through custom storage volumes
CVE-2025-64507
Fix available
8.6 High
-
lxc incus
Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs
CVE-2025-52890
Fix available
8.1 High
- Show olderLoading…