CVE-2026-81498

Summary Impact The "nvidia.driver.capabilities" instance configuration key in Incus uses "validate.IsAny" at "internal/instance/config.go:744", which accepts any input without filtering. The value is subsequently written to the generated "lxc.conf" file at...

CVE-2026-81498

GHSA-m3j6-p3v3-qmjv: Container configuration newline injection through nvidia.driver.capabilities...

CVE-2026-63298

An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.' configuration...

CVE-2026-63298: Improper Neutralization of Special Elements used in an OS Command

An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.' configuration...