GO-2026-5127 Incus Vulnerable to Panic via Snapshot Bounds Check in github.com/lxc/incus

Incus Vulnerable to Panic via Snapshot Bounds Check in github.com/lxc/incus...

ROS-20260622-73-0048

The vulnerability in the incus is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260622-73-0054

The vulnerability in the incus is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260622-73-0053

The vulnerability in the incus is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260622-73-0052

The vulnerability in the incus is related to errors in the authentication process for certifying certificates. This vulnerability can be exploited remotely...

ROS-20260622-73-0047

The vulnerability in the incus is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260622-73-0050

The vulnerability in the incus is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260622-73-0049

The vulnerability in the incus is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260622-73-0051

The vulnerability in the incus is related to unvalidated array indexing. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Container management system Template Creation Code Execution

The vulnerability of the container management system and the virtual machine manager Incus is related to the failure to take measures to neutralize special elements in the template creation mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Incus Authentication Data Compromise

The vulnerability of the container management system and the virtual machine manager Incus is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...

Incus Unlimited Resource Distribution DoS

The vulnerability of the container management system and the virtual machine manager Incus is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Incus Symbolic Link Privilege Escalation

The vulnerability of the container management system and the virtual machine manager Incus relates to the tracking of symbolic links. Exploiting this vulnerability can allow attackers to enhance their privileges...

Incus Path Traversal Unauthorized Access

The vulnerability of the container management system and the virtual machine manager Incus is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Incus Privilege Escalation

The vulnerability of the container management system and the virtual machine manager Incus is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers operating remotely to enhance their privileges...

[BSA-133] Security Update for incus

Mathias Gibbens uploaded new packages for incus which fixed the following security problems: CVE ID : CVE-2026-40195 CVE-2026-40197 CVE-2026-40243 CVE-2026-40251 CVE-2026-41647 CVE-2026-41648 CVE-2026-41684 CVE-2026-41685 Multiple security issues were discovered in Incus, a system container and...

Improper Authentication

github.com/lxc/incus/v6/cmd/incus is vulnerable to Improper Authentication. The vulnerability is due to improper validation of the authentication token passed in the incus webui URL, which allows an attacker who can access the temporary localhost web server to bypass authentication and gain the...

CVE-2026-41684

A flaw was found in Incus, a system container and virtual machine manager. An authenticated user with permissions to import instance backups could craft a malicious backup archive. This archive, containing a valid inline configuration but a malformed legacy backup file, could cause the Incus daem...

CVE-2026-40243

A flaw was found in Incus, a system container and virtual machine manager. The Open Virtual Network OVN database connection logic contains broken Transport Layer Security TLS validation. A remote attacker, by impersonating or intercepting the OVN endpoint on the management network, can present a...

Arbitrary File Read And Write

Incus is vulnerable to arbitrary file read and write. The vulnerability is due to improper enforcement of the pongo2 chroot isolation mechanism in instance template files, which allows an attacker to bypass filesystem restrictions and perform arbitrary file read/write operations on the host syste...