Lxc Incus vulnerabilities

• lxc incus Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull CVE-2026-115378 Fix available 6.9 MediumOctober 22, 2026
• lxc incus Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream CVE-2026-115377 Fix available 9.4 CriticalOctober 22, 2026
• lxc incus Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy CVE-2026-115376 Fix available 8.3 HighOctober 22, 2026
• lxc incus Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes CVE-2026-115375 Fix available 9.4 CriticalOctober 22, 2026
• lxc incus Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLs CVE-2026-115374 Fix available 7.1 HighOctober 22, 2026
• lxc incus Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid} CVE-2026-115373 Fix available 7.0 HighOctober 22, 2026
• lxc incus Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options CVE-2026-115372 Fix available 9.0 CriticalOctober 22, 2026
• lxc incus LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpoints CVE-2026-115371 Fix available 7.1 HighOctober 22, 2026
• lxc incus Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh CVE-2026-115370 Fix available 5.3 MediumOctober 22, 2026
• lxc incus Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root CVE-2026-63343 Fix available 9.9 CriticalAugust 21, 2026
• lxc incus Incus vulnerable to root RCE via image backup.yaml symlink CVE-2026-63125 Fix available 9.9 CriticalAugust 21, 2026
• lxc incus Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge CVE-2026-62941 Fix available 9.9 CriticalAugust 21, 2026
• lxc incus Incus has a project restriction bypass via instance migration config override CVE-2026-62940 Fix available 9.9 CriticalAugust 21, 2026
• lxc incus Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution CVE-2026-62867 Fix available 9.9 CriticalAugust 21, 2026
• lxc incus Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated` CVE-2026-62313 Fix available 4.3 MediumAugust 21, 2026
• lxc incus Incus has a project restriction bypass in instance copy across projects CVE-2026-55622 Fix available 7.7 HighAugust 21, 2026
• lxc incus Incus has a project restriction bypass for custom volume copy across projects CVE-2026-55621 Fix available 7.7 HighAugust 21, 2026
• lxc incus Incus has an arbitrary file write on its client due to trusted image hash CVE-2026-48769 Fix available 9.9 CriticalJune 26, 2026
• lxc incus Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) CVE-2026-48756 Fix available 2.1 LowJune 26, 2026
• lxc incus Incus has an argument injection in backup compression algorithm leading to AFW and ACE CVE-2026-48755 Fix available 9.9 CriticalJune 26, 2026
• lxc incus Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} CVE-2026-48754 Fix available 2.1 LowJune 26, 2026
• lxc incus Incus has an arbitrary file write via path traversal in S3 multipart upload CVE-2026-48753 Fix available 9.9 CriticalJune 26, 2026
• lxc incus, canonical lxd +1 more Incus has arbitrary file read+write on host via templates/ symlink in malicious image CVE-2026-48752 Fix available 9.9 CriticalJune 26, 2026
• lxc incus Incus has a restricted project bypass leading to arbitrary command execution CVE-2026-48751 Fix available 9.9 CriticalJune 26, 2026
• lxc incus Incus has an arbitrary file write on host via `exec-output` symlink in crafted image CVE-2026-48750 Fix available 9.9 CriticalJune 26, 2026
• lxc incus, canonical lxd +1 more Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image CVE-2026-48749 Fix available 9.9 CriticalJune 26, 2026
• lxc incus Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) CVE-2026-47753 Fix available 4.4 MediumJune 10, 2026
• linuxcontainers incus Incus: Unbounded binary import disk exhaustion CVE-2026-41685 Fix available 4.3 MediumMay 4, 2026
• linuxcontainers incus Incus: Nil Dereferences on Restore via Malformed YAML CVE-2026-41684 Fix available 6.5 MediumMay 4, 2026
• linuxcontainers incus Incus: Unbounded YAML Metadata Decode via Parsing CVE-2026-41648 Fix available 5.3 MediumMay 4, 2026
• linuxcontainers incus Incus: Nil-Pointer Dereference via S3 Bucket Import CVE-2026-41647 Fix available 6.5 MediumMay 4, 2026
• linuxcontainers incus Incus out-of-bounds panic in snapshot metadata handling allows denial of service CVE-2026-40251 Fix available 7.1 HighMay 4, 2026
• linuxcontainers incus Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation CVE-2026-40243 Fix available 2.3 LowMay 4, 2026
• linuxcontainers incus Incus nil-pointer dereference in custom volume import allows denial of service CVE-2026-40197 Fix available 7.1 HighMay 4, 2026
• linuxcontainers incus Incus nil-pointer dereference in storage bucket import allows denial of service CVE-2026-40195 Fix available 7.1 HighMay 4, 2026
• linuxcontainers incus Incus blind SSRF via image import preflight HEAD request CVE-2026-35527 Fix available 5.3 MediumMay 4, 2026
• linuxcontainers incus Abitrary file write through systemd-creds option CVE-2026-33945 Fix available 10.0 CriticalMarch 26, 2026
• linuxcontainers incus Local Incus UI web server vulnerable to nuthentication bypass CVE-2026-33898 Fix available 8.8 HighMarch 26, 2026
• linuxcontainers incus Incus vulnerable to arbitrary file read and write through pongo templates CVE-2026-33897 Fix available 10.0 CriticalMarch 26, 2026
• linuxcontainers incus Incus vulnerable to denial of source through crafted bucket backup file CVE-2026-33743 Fix available 6.5 MediumMarch 26, 2026
• linuxcontainers incus Incus vulnerable to local privilege escalation through VM screenshot path CVE-2026-33711 Fix available 4.7 MediumMarch 26, 2026
• linuxcontainers incus Incus does not verify combined fingerprint when downloading images from simplestreams servers CVE-2026-33542 Fix available 5.7 MediumMarch 26, 2026
• lxc incus-os IncusOS has a LUKS encryption bypass due to insufficient TPM policy CVE-2026-32606 Public exploitFix available 7.7 HighMarch 16, 2026
• linuxcontainers incus Incus container image templating arbitrary host file read and write CVE-2026-23954 Fix available 8.7 HighJanuary 22, 2026
• linuxcontainers incus Incus container environment configuration newline injection CVE-2026-23953 Fix available 8.7 HighJanuary 22, 2026
• linuxcontainers incus Incus vulnerable to local privilege escalation through custom storage volumes CVE-2025-64507 Fix available 8.6 HighNovember 10, 2025
• lxc incus Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs CVE-2025-52890 Fix available 8.1 HighJune 25, 2025
• lxc incus Incus vulnerable to DoS through antispoofing nftables firewall rule bypass on bridge networks with ACLs CVE-2025-52889 Fix available 3.4 LowJune 25, 2025