Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in sftpRecursivePullFile that allows a malicious incus-agent to escape the target directory during incus file pull -r. Attackers with root in a virtual machine can return duplicate entries reported first as symlinks then as files or directories, writing attacker-controlled files such as /etc/shadow on the operator's host.
CVE-2026-115377 is a critical arbitrary file write vulnerability in the Incus container management software (lxc). It affects versions before 6.0.7, versions from 6.1.0 up to but not including 7.0.2, and versions from 7.1.0 up to but not including 7.5.0. The flaw allows malicious migration sources to write files on the host system by planting symbolic links in transferred volumes during migration. This can lead to full host compromise if exploited.
Incus versions 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contain an authorization bypass vulnerability. This flaw allows project-restricted clients to copy volumes by omitting the source.type parameter. Attackers can exploit this by sending crafted POST requests to the custom volumes endpoint with a chosen source.project, enabling them to copy and read volumes, snapshots, and configurations from other projects.
Incus versions 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contain a path traversal vulnerability that allows clients with instance creation privileges to write files on the host system. The vulnerability arises from unvalidated custom volume names in instance backup index.yaml files, which can include '../' sequences. Exploiting this flaw enables attackers to create root-owned directories with attacker-controlled content, potentially leading to full host compromise.
Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in its built-in S3 server that allows presigned URL holders to inject unsigned x-amz-* headers. Attackers can add an unsigned X-Amz-Copy-Source header to a presigned upload URL to copy other bucket objects onto the granted key, disclosing their contents and ETags.
Incus versions before 6.0.7, versions from 6.1.0 up to but not including 7.0.2, and versions from 7.1.0 up to but not including 7.5.0 contain a missing authorization vulnerability in the GET /1.0/operations/{uuid} endpoint. This flaw allows project-restricted clients to access operations belonging to other projects. Exploitation requires possession of a restricted certificate and knowledge of a valid operation UUID. Successful exploitation can expose sensitive data including command lines, environment secrets, websocket secrets, and trust enrolment tokens.
CVE-2026-115372 is a critical vulnerability in Incus versions 7.3.0 up to but not including 7.5.0. It allows restricted project users to bypass project restrictions by setting block.create_options during volume update, copy, and move operations. This can lead to argument injection into the mkfs command executed as root, potentially allowing privilege escalation.
Incus versions 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contain an improper authorization vulnerability that allows restricted TLS clients to access storage bucket keys in the default project. This vulnerability enables attackers to retrieve S3 access and secret keys, potentially allowing them to read, modify, or delete objects in those buckets.
Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerability that allows restricted project users to use pull mode migration via clustered refresh requests. Attackers with instance creation rights can send a refresh migration request for an existing instance to make the server open outbound TLS websocket connections and probe reachable services.
A vulnerability in lxc-ci's Arch Linux images prior to 2026-05-28 involves the use of a hard-coded pacman local-signing private key. This key is embedded in the image and distributed to all containers or virtual machines created from it. An attacker who can control or intercept HTTP package mirror traffic can misuse this key to sign malicious packages, which affected clients will trust and install. Successful exploitation allows arbitrary code execution with root privileges on the client system. The issue is fixed in Arch Linux images published on or after 2026-05-28.
CVE-2026-62941 is a critical authorization vulnerability in incus, a system container and virtual machine manager. Prior to version 7.3.0, when copying an instance across projects, the project restriction check occurs before the source instance's configuration is merged. This allows dangerous configuration keys to bypass project restrictions. The issue is patched in version 7.3.0.
A missing authorization vulnerability in Incus (a system container and VM manager) prior to version 7.3.0 allows restricted project users to escalate privileges during instance migration by applying user-supplied configuration overrides without enforcing project restrictions. This can lead to privileged container creation and host escape. The issue is fixed in version 7.3.0.
CVE-2026-62867 is a critical vulnerability in Incus, a system container and virtual machine manager. Prior to version 7.3.0, improper validation of user-supplied 'block.create_options' in storage volume configuration allows argument injection in the filesystem creation command line. This flaw enables a project-scoped user to inject arbitrary arguments into a root-executed binary. The issue is patched in version 7.3.0.
CVE-2026-62313 is an authorization vulnerability in Incus, a system container and virtual machine manager. Prior to version 7.3.0, the project-level enforcement of the 'restricted.containers.privilege=isolated' setting can be bypassed. This allows users to create containers that share the host's uid/gid map, defeating the intended isolation between containers and weakening security boundaries. The issue arises because the enforcement only rejects an explicitly set 'security.idmap.isolated=false' but does not enforce restrictions when the key is omitted, which defaults to non-isolation. Version 7.3.0 includes a patch for this vulnerability.
CVE-2026-47753 is a NULL pointer dereference vulnerability in the Incus system container and virtual machine manager prior to version 7.1.0. An authenticated user with permission to create instances can trigger a daemon crash by uploading a crafted backup tarball, causing denial of service across all projects on the affected cluster member. The issue arises from a missing null check on the Volume field in the instance-import path. Version 7.1.0 includes a patch that addresses this vulnerability.
CVE-2026-55622 is an improper access control vulnerability in the lxc incus project that allows an attacker with knowledge of a project and instance name, but without authorization, to copy that instance to another project. This occurs because the source instance is loaded without verifying the caller's permission to view it. The vulnerability affects incus versions prior to 7.2.0 and has a high severity rating with a CVSS score of 7.7. Exploitation could lead to unauthorized access to secrets stored within instances.
CVE-2026-55621 is an improper access control vulnerability in the lxc incus project that allows an attacker with knowledge of a project and its custom volume name, but without proper authorization, to copy that volume into another project they control. This flaw arises because the system does not verify the attacker's permission to view the source volume before copying it. Exploitation requires access to the same server hosting the volume. The vulnerability affects incus versions prior to 7.2.0 and has a high severity score of 7.7.
Incus is a system container and virtual machine manager. Prior to version 7.3.0, a malicious image containing a `metadata.yaml` symlink pointing to an arbitrary host path allows an authenticated Incus user to read or overwrite any file on the host as root via the instance metadata API. The `exec-output` and `templates/` paths were patched in a prior release using `Lstat` rejection and `os.OpenRoot` confinement; `metadata.yaml` was not included in either patch and remains exploitable. Version 7.3.0 patches the issue.
Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus user (a non-admin TLS/RBAC identity with `can_create_images` and `can_create_instances`) can execute arbitrary code as root on the host. A crafted image ships `backup.yaml` as a symlink to a host file. When the root daemon writes the instance's backup file, it follows the symlink. Version 7.3.0 patches the issue.
Incus is a system container and virtual machine manager. Prior to version 7.0.0, uploads of large amount of data by authenticated users can run the Incus server out of disk space, potentially taking down the host system. The impact here is limited for anyone using storage.images_volume and storage.backups_volume as those users will have large uploads be stored on those volumes rather than directly on the host filesystem. This is the default behavior on IncusOS. This issue has been patched in version 7.0.0.