CVE-2026-35527: CWE-918: Server-Side Request Forgery (SSRF) in lxc incus
CVE-2026-35527 is a Server-Side Request Forgery (SSRF) vulnerability in the Incus container and virtual machine manager versions prior to 7.0.0. The issue arises because the image import flow issues an outbound HEAD request to a user-supplied URL before validating project restrictions. This allows an authenticated user to cause the daemon to send blind HEAD requests to arbitrary destinations, potentially probing internal services or cloud metadata endpoints. Additionally, these requests include server metadata in custom headers, disclosing host environment information. The vulnerability has been fixed in version 7.0.0.
AI Analysis
Technical Summary
Incus versions before 7.0.0 have an SSRF vulnerability in the image import flow where the imgPostURLInfo function sends a HEAD request to a user-supplied URL before enforcing project restrictions like restricted.images.servers. Although the actual image download is blocked by policy, the daemon performs blind HEAD requests that include server metadata headers (Incus-Server-Architectures, Incus-Server-Version). This allows an authenticated attacker to probe internal or cloud metadata services accessible from the host. The vulnerability is similar to CVE-2026-24767 and was addressed in Incus version 7.0.0.
Potential Impact
An authenticated user can exploit this SSRF vulnerability to make the Incus daemon send blind HEAD requests to arbitrary URLs, potentially accessing internal network services or cloud metadata endpoints. The requests disclose server metadata via custom headers, leaking information about the host environment. This can aid attackers in reconnaissance within the internal network or cloud infrastructure. The actual image import is blocked by project restrictions, limiting direct exploitation to SSRF and information disclosure.
Mitigation Recommendations
This vulnerability has been fixed in Incus version 7.0.0. Users should upgrade to version 7.0.0 or later to remediate this issue. No other official remediation or temporary fixes are documented. Patch status is not explicitly stated beyond the fix in version 7.0.0, so users should verify with the vendor advisory for the latest guidance.
CVE-2026-35527: CWE-918: Server-Side Request Forgery (SSRF) in lxc incus
Description
CVE-2026-35527 is a Server-Side Request Forgery (SSRF) vulnerability in the Incus container and virtual machine manager versions prior to 7.0.0. The issue arises because the image import flow issues an outbound HEAD request to a user-supplied URL before validating project restrictions. This allows an authenticated user to cause the daemon to send blind HEAD requests to arbitrary destinations, potentially probing internal services or cloud metadata endpoints. Additionally, these requests include server metadata in custom headers, disclosing host environment information. The vulnerability has been fixed in version 7.0.0.
CVSS v4.0
Score 5.3medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Incus versions before 7.0.0 have an SSRF vulnerability in the image import flow where the imgPostURLInfo function sends a HEAD request to a user-supplied URL before enforcing project restrictions like restricted.images.servers. Although the actual image download is blocked by policy, the daemon performs blind HEAD requests that include server metadata headers (Incus-Server-Architectures, Incus-Server-Version). This allows an authenticated attacker to probe internal or cloud metadata services accessible from the host. The vulnerability is similar to CVE-2026-24767 and was addressed in Incus version 7.0.0.
Potential Impact
An authenticated user can exploit this SSRF vulnerability to make the Incus daemon send blind HEAD requests to arbitrary URLs, potentially accessing internal network services or cloud metadata endpoints. The requests disclose server metadata via custom headers, leaking information about the host environment. This can aid attackers in reconnaissance within the internal network or cloud infrastructure. The actual image import is blocked by project restrictions, limiting direct exploitation to SSRF and information disclosure.
Mitigation Recommendations
This vulnerability has been fixed in Incus version 7.0.0. Users should upgrade to version 7.0.0 or later to remediate this issue. No other official remediation or temporary fixes are documented. Patch status is not explicitly stated beyond the fix in version 7.0.0, so users should verify with the vendor advisory for the latest guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-04-03T02:15:39.281Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69fa9bcdcbff5d86107d1b70
Added to database: 5/6/2026, 1:39:25 AM
Last enriched: 5/13/2026, 3:47:22 AM
Last updated: 6/20/2026, 8:40:41 AM
Views: 80
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.