181 matches found
FRAGNESIA-Charan-cve-2026-46300
Charantej Architecture: Hardened Container Staging & Syscall Telemetry Lab An enterprise-grade, defense-in-depth container containment and runtime security telemetry framework. Designed from the perspective of a Cisco Lead Cybersecurity Architect, the Charantej Architecture isolates staging...
Podroid
Podroid Run Linux containers and a full Linux desktop on your Android phone. No root. A real Alpine Linux VM with its own kernel - not a chroot or proot trick - so Podman, Docker and LXC behave exactly like they do on a server. Website · Documentation · Download APK Home | Running | !Built-in...
nanoclaw
An AI assistant that runs agents securely in their own containers. Lightweight, built to be easily understood and completely customized for your needs. nanoclaw.dev • docs • 中文 • 日本語 • 한국어 • • Agents in Slack: one app per agent Setup provisions each agent its own Slack app: manifest, avatar, and...
dd
dd Run Linux containers on macOS — with no VM. What is dd? dd runs Linux containers natively on Apple-Silicon macOS without a virtual machine. There is no Linux kernel and no hypervisor underneath: a JIT translates the container's code and services its Linux syscalls in userspace the gVisor / PRo...
Astra Linux – Vulnerability in Containerd
Containerd is a container runtime that is available as a daemon for Linux and Windows. A bug was discovered in Containerd prior to versions 1.6.1, 1.5.10, and 1.14.12. In these versions, containers launched through Containerd’s CRI implementation on Linux, with a specially crafted image...
Improper Validation of Specified Type of Input
Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input in client/llb/exec.go and executor/oci/speclinux.go. An attacker can disable Seccomp and AppArmor protections for a build container by supplying a crafted build request with an invalid...
EulerOS 2.0 SP11 : lxc (EulerOS-SA-2026-3084)
According to the versions of the lxc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the findline function that allows an...
Security update for helm
This update for helm rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...
GO-2026-5808 Incus has an argument injection in backup compression algorithm leading to AFW and ACE in github.com/lxc/incus
Incus has an argument injection in backup compression algorithm leading to AFW and ACE in github.com/lxc/incus...
CVE-2026-9640
CVE-2026-9640 concerns LXD versions 6.0–6.9, 5.21.0–5.21.5, and 5.0.0–5.0.7. It describes a privilege escalation where an authenticated project operator in a restricted multi-tenant environment can bypass project-restriction policies during snapshot restoration by importing a malicious instance b...
GO-2026-5384 Incus has Nil-Pointer Dereference via S3 Bucket Import in github.com/lxc/incus
Incus has Nil-Pointer Dereference via S3 Bucket Import in github.com/lxc/incus...
ROS-20260624-73-0015
The vulnerability in LXC is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2026-39402
A flaw was found in LXC Linux Containers, specifically within the lxc-user-nic helper. This logic flaw allows an unprivileged attacker, with a valid lxc-usernet policy entry, to delete OpenVSwitch OVS-attached network interfaces owned by other users. In multi-tenant environments using lxc-user-ni...
Incus code issue vulnerabilities
Incus is a system container and virtual machine manager developed by LXC. Versions of Incus prior to 7.0.0 contained code vulnerabilities. These vulnerabilities stemmed from the backup.GetInfo function’s trust inlining backup configurations, which allowed valid, inline configurations along with...
Container security vulnerabilities
Container is an open-source tool developed by Apple for creating and running Linux containers on Mac devices. Versions of Container prior to 0.12.3 have a security vulnerability. This vulnerability arises when connecting to hosts with domain names that bypass pattern matching, causing registry...
[SECURITY] Fedora 42 Update: incus-6.23-3.fc42
Container hypervisor based on LXC Incus offers a REST API to remotely manage containers over the network, using an image based work-flow and with support for live migration. This package contains the Incus daemon...
[SECURITY] Fedora 42 Update: containernetworking-plugins-1.9.1-1.fc42
Reference and example networking plugins, maintained by the CNI team. The CNI Container Network Interface project consists of a specification and libraries for writing plugins to configure network interfaces in Linux containers, along with a number of supported plugins. CNI concerns itself only...
IncusOS security vulnerabilities
IncusOS is an immutable operating system image developed for container management platforms, based on the LXC open source framework. Previous versions of IncusOS 202603142010 contained security vulnerabilities. These vulnerabilities stemmed from a default configuration that allowed physical acces...
CVE-2026-3351
Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fingerprints trusted by the lxd server...
