CVE-2026-63343

creationtimestamp| type| source ---|---|--- 2026-08-21 16:09:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtm5iab4xo2t 2026-08-21 19:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtmjatvxh52p 2026-08-21 22:30:04+00:00| seen|...

CVE-2026-63343

Incus is a system container and virtual machine manager. Prior to version 7.3.0, a malicious image containing a metadata.yaml symlink pointing to an arbitrary host path allows an authenticated Incus user to read or overwrite any file on the host as root via the instance metadata API. The...