CVE-2026-48750

CVE-2026-48750 is a critical (CVSS 9.9) arbitrary file write vulnerability in Incus (system container and VM manager) prior to version 7.2.0 . The record-output parameter of the /instances/$name/exec endpoint follows a symlink at exec-output inside a crafted image, allowing an attacker to write a...