CVE-2026-35527: CWE-918: Server-Side Request Forgery (SSRF) in lxc incus
CVE-2026-35527 is a server-side request forgery (SSRF) vulnerability in the Incus container and virtual machine manager versions prior to 7. 0. 0. The vulnerability arises because the image import process issues an outbound HEAD request to a user-supplied URL before validating project restrictions. This allows an authenticated user to coerce the daemon into making blind HEAD requests to arbitrary destinations, potentially probing internal services or cloud metadata endpoints. Additionally, these requests include server metadata in custom headers, disclosing host environment information. The issue has been fixed in version 7. 0. 0.
AI Analysis
Technical Summary
Incus versions before 7.0.0 have an SSRF vulnerability in the image import flow. Specifically, the imgPostURLInfo function sends a HEAD request to a user-supplied URL to resolve image metadata before enforcing project restrictions such as restricted.images.servers. Although the actual image download is blocked by policy, the HEAD request is made unconditionally, allowing an authenticated user to make blind SSRF requests. These requests include custom headers revealing server architecture and version information. This vulnerability enables attackers to probe internal or cloud metadata services accessible from the host. The vulnerability is similar to CVE-2026-24767 and has been fixed in Incus 7.0.0.
Potential Impact
An authenticated user can exploit this vulnerability to make the Incus daemon send blind HEAD requests to arbitrary URLs, potentially accessing internal network services or cloud metadata endpoints. The inclusion of server metadata in request headers leaks information about the host environment. This can aid attackers in reconnaissance and further attacks within the internal network. The vulnerability does not allow direct image import bypass but facilitates network probing and information disclosure.
Mitigation Recommendations
This vulnerability is fixed in Incus version 7.0.0. Users should upgrade to version 7.0.0 or later to remediate this issue. No official patch or temporary fix is indicated other than upgrading. Since this is not a cloud service, remediation depends on user action to update the software.
CVE-2026-35527: CWE-918: Server-Side Request Forgery (SSRF) in lxc incus
Description
CVE-2026-35527 is a server-side request forgery (SSRF) vulnerability in the Incus container and virtual machine manager versions prior to 7. 0. 0. The vulnerability arises because the image import process issues an outbound HEAD request to a user-supplied URL before validating project restrictions. This allows an authenticated user to coerce the daemon into making blind HEAD requests to arbitrary destinations, potentially probing internal services or cloud metadata endpoints. Additionally, these requests include server metadata in custom headers, disclosing host environment information. The issue has been fixed in version 7. 0. 0.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Incus versions before 7.0.0 have an SSRF vulnerability in the image import flow. Specifically, the imgPostURLInfo function sends a HEAD request to a user-supplied URL to resolve image metadata before enforcing project restrictions such as restricted.images.servers. Although the actual image download is blocked by policy, the HEAD request is made unconditionally, allowing an authenticated user to make blind SSRF requests. These requests include custom headers revealing server architecture and version information. This vulnerability enables attackers to probe internal or cloud metadata services accessible from the host. The vulnerability is similar to CVE-2026-24767 and has been fixed in Incus 7.0.0.
Potential Impact
An authenticated user can exploit this vulnerability to make the Incus daemon send blind HEAD requests to arbitrary URLs, potentially accessing internal network services or cloud metadata endpoints. The inclusion of server metadata in request headers leaks information about the host environment. This can aid attackers in reconnaissance and further attacks within the internal network. The vulnerability does not allow direct image import bypass but facilitates network probing and information disclosure.
Mitigation Recommendations
This vulnerability is fixed in Incus version 7.0.0. Users should upgrade to version 7.0.0 or later to remediate this issue. No official patch or temporary fix is indicated other than upgrading. Since this is not a cloud service, remediation depends on user action to update the software.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-04-03T02:15:39.281Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69fa9bcdcbff5d86107d1b70
Added to database: 5/6/2026, 1:39:25 AM
Last enriched: 5/6/2026, 1:39:29 AM
Last updated: 5/6/2026, 3:53:44 AM
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.