745 matches found
PT-2026-121556
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in sftpRecursivePullFile that allows a malicious incus-agent to escape the target directory during incus file pull -r. Attackers with root in a virtual machine can return duplicate entrie...
PT-2026-121552
Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in its built-in S3 server that allows presigned URL holders to inject unsigned x-amz- headers. Attackers can add an unsigned X-Amz-Copy-Source header to a presigned upload URL to copy other bucket objects onto...
PT-2026-121548
Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerability that allows restricted project users to use pull mode migration via clustered refresh requests. Attackers with instance creation rights can send a refresh migration request for an...
CVE-2026-81496
Summary "POST /1.0/instances" with an "application/octet-stream" body instance backup import reads the instance name from the tarball's "backup/index.yaml" verbatim and uses it as an on-disk path segment. A project user with the "cancreateinstances" entitlement can set "name:...
incus-7.5.1-1.1 on GA media (moderate)
incus-7.5.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11983-1 Rating: moderate Cross-References: CVE-2026-85185 CVE-2026-85526 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...
PT-2026-105692
These are all security issues fixed in the incus-7.5.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11983-1 incus-7.5.1-1.1 on GA media
These are all security issues fixed in the incus-7.5.1-1.1 package on the GA media of openSUSE Tumbleweed...
Incus Arbitrary Command Execution
The vulnerability of the container management system and the virtual machine manager Incus is related to improper external control of the file name or path. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Docker Control System Record-Output Command Execution
The vulnerability of the “record-output” parameter at the final destination /instances/$name/exec of the Docker control system and the Incus virtual machine manager is related to improper external management of file names or file paths. Exploiting this vulnerability allows a remote attacker to...
Incus Arbitrary Command Execution
The vulnerability of the container management system and the virtual machine manager Incus is related to improper external control of the file name or path. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
container management system CreateCustomVolumeFromBackup DoS
The vulnerability of the CreateCustomVolumeFromBackup function in the internal/server/storage/backend.go file of the container management system and the virtual machine manager software Incus is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...
container management system CreateInstanceFromBackup DoS
The vulnerability of the CreateInstanceFromBackup function in the internal/server/storage/backend.go file of the container management system and the virtual machine manager Incus is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause service interruptio...
Container management system validation mechanism Command Execution
The vulnerability of the validation mechanism for the compression algorithm of the container management system and the Incus virtual machine manager relates to insufficient checking of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
Incus Arbitrary Command Execution
The vulnerability of the container management system and the virtual machine manager Incus is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Incus Authentication Bypass Command Execution
The vulnerability of the container management system and the virtual machine manager Incus is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
[SECURITY] [DSA 6518-1] incus security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6518-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 26, 2026 https://www.debian.org/security/faq -...
Debian dsa-6518 : golang-github-lxc-incus-dev - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6518 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6518-1 [email protected] https://www.debian.org/security/ Moritz...
CVE-2026-63343
A flaw was found in Incus, a system container and virtual machine manager. An authenticated Incus user can exploit this vulnerability by providing a malicious image containing a metadata.yaml symlink that points to an arbitrary host path. This allows the user to read or overwrite any file on the...
ROS-20260921-73-0070
The vulnerability in the incus is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...