CVE-2026-115376

A flaw was found in Incus. An authorization bypass allows authenticated, project-restricted users to gain unauthorized access to data belonging to other projects. By submitting a crafted volume copy request that omits the source volume type, an attacker can duplicate and inspect another project's...