A broken TLS validation logic in the OVN database connection within Incus allows an attacker who can intercept the OVN endpoint to impersonate the OVN database by presenting a rogue self-signed certificate. The vulnerability arises because the custom TLS verifier accepts peer-supplied root certificates instead of anchoring trust in the configured CA certificate, undermining the intended authentication model. This affects authenticated connections from Incus to OVN northbound and southbound databases, which are critical for logical network configuration and control-plane coordination. The flaw reduces CA-anchored authentication to endpoint impersonation by an attacker with network access, but exploitation is difficult due to typical deployment architectures. A fix is available in Incus version 7.0.0.