CVE-2026-33711

Incus is a system container and virtual machine manager. Incus provides an API to retrieve VM screenshots. That API relies on the use of a temporary file for QEMU to write the screenshot to which is then picked up and sent to the user prior to deletion. As versions prior to 6.23.0 use predictable...

CVE-2026-33711

Summary: Incus exposes a local-privilege/escalation risk via its API that returns VM screenshots. The issue arises from using a temporary file in QEMU to hold the screenshot, with versions before 6.23.0 writing to predictable /tmp paths. An attacker with local access can pre-create symlinks to ma...