lxc incus

• CVE-2026-115378 Medium 5.8 Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull 0.3%
• CVE-2026-115377 Critical 9.9 Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream 0.4%
• CVE-2026-115376 High 7.7 Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy 0.3%
• CVE-2026-115375 Critical 9.9 Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes 0.4%
• CVE-2026-115374 High 7.1 Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLs 0.2%
• CVE-2026-115373 Medium 6.3 Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid} 0.3%
• CVE-2026-115372 High 8.5 Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options 0.4%
• CVE-2026-115371 High 7.1 LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpoints 0.2%
• CVE-2026-115370 Medium 4.3 Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh 0.4%
• CVE-2026-63343 Critical 9.9 Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root 0.5%
• CVE-2026-63125 Critical 9.9 Incus vulnerable to root RCE via image backup.yaml symlink 0.7%
• CVE-2026-62941 Critical 9.9 Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge 0.4%
• CVE-2026-62940 Critical 9.9 Incus has a project restriction bypass via instance migration config override 0.4%
• CVE-2026-62867 Critical 9.9 Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution 0.5%
• CVE-2026-62313 Medium 4.3 Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated` 0.4%
• CVE-2026-55622 High 7.7 Incus has a project restriction bypass in instance copy across projects 0.5%
• CVE-2026-55621 High 7.7 Incus has a project restriction bypass for custom volume copy across projects 0.4%
• CVE-2026-48769 Critical 9.9 Incus has an arbitrary file write on its client due to trusted image hash 0.8%
• CVE-2026-48755 Critical 9.9 Incus has an argument injection in backup compression algorithm leading to AFW and ACE 0.8%
• CVE-2026-48754 Low 2.1 Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} 0.4%
• CVE-2026-48753 Critical 9.9 Incus has an arbitrary file write via path traversal in S3 multipart upload 0.7%
• CVE-2026-48752 Critical 9.9 Incus has arbitrary file read+write on host via templates/ symlink in malicious image 0.8%
• CVE-2026-48751 Critical 9.9 Incus has a restricted project bypass leading to arbitrary command execution 0.7%
• CVE-2026-48750 Critical 9.9 Incus has an arbitrary file write on host via `exec-output` symlink in crafted image 0.8%
• CVE-2026-48749 Critical 9.9 Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image 0.8%
• CVE-2026-47753 Medium 4.4 Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) 0.2%
• CVE-2026-48756 Low 2.1 Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) 0.4%
• CVE-2026-41685 Medium 4.3 Incus: Unbounded binary import disk exhaustion 0.3%
• CVE-2026-41684 Medium 6.5 Incus: Nil Dereferences on Restore via Malformed YAML 0.4%
• CVE-2026-41648 Medium 5.3 Incus: Unbounded YAML Metadata Decode via Parsing 0.3%
• CVE-2026-41647 Medium 6.5 Incus: Nil-Pointer Dereference via S3 Bucket Import 0.4%
• CVE-2026-40251 High 7.1 Incus out-of-bounds panic in snapshot metadata handling allows denial of service 0.4%
• CVE-2026-40243 Low 2.3 Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation 0.2%
• CVE-2026-40197 High 7.1 Incus nil-pointer dereference in custom volume import allows denial of service 0.4%
• CVE-2026-40195 High 7.1 Incus nil-pointer dereference in storage bucket import allows denial of service 0.4%
• CVE-2026-35527 Medium 5.3 Incus blind SSRF via image import preflight HEAD request 0.3%
• CVE-2026-33945 Critical 10.0 Abitrary file write through systemd-creds option 0.5%
• CVE-2026-33898 High 8.8 Local Incus UI web server vulnerable to nuthentication bypass 0.4%
• CVE-2026-33897 Critical 10.0 Incus vulnerable to arbitrary file read and write through pongo templates 0.5%
• CVE-2026-33743 Medium 6.5 Incus vulnerable to denial of source through crafted bucket backup file 0.4%
• CVE-2026-33711 Medium 4.7 Incus vulnerable to local privilege escalation through VM screenshot path 0.4%
• CVE-2026-33542 Medium 5.7 Incus does not verify combined fingerprint when downloading images from simplestreams servers 0.2%
• CVE-2026-23954 High 8.7 Incus container image templating arbitrary host file read and write 0.8%
• CVE-2026-23953 High 8.7 Incus container environment configuration newline injection 0.5%
• CVE-2025-64507 High 8.6 Incus vulnerable to local privilege escalation through custom storage volumes 0.2%
• CVE-2025-52890 High 8.1 Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs 0.2%
• CVE-2025-52889 Low 3.4 Incus vulnerable to DoS through antispoofing nftables firewall rule bypass on bridge networks with ACLs 0.3%