CVE-2026-115378

The Incus container management platform contains an arbitrary file write vulnerability in the sftpRecursivePullFile function. Affected versions include those before 6.0.7 , 6.1.0 before 7.0.2 , and 7.1.0 before 7.5.0 . A malicious incus-agent can escape the target directory during an incus file p...

CVE-2026-115378 Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in sftpRecursivePullFile that allows a malicious incus-agent to escape the target directory during incus file pull -r. Attackers with root in a virtual machine can return duplicate entrie...

Fedora 42 : incus (2026-4481307278)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4481307278 advisory. Remove incus dependency from incus-agent. ---- Update to 6.23 Tenable has extracted the preceding description block directly from the Fedora securit...

Fedora 43 : incus (2026-094b7621cf)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-094b7621cf advisory. Remove incus dependency from incus-agent. ---- Update to 6.23 Tenable has extracted the preceding description block directly from the Fedora securit...