9.9
Critical
CVE-2026-63125 Incus is a system container and virtual machine manager
Description
Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus user (a non-admin TLS/RBAC identity with `can_create_images` and `can_create_instances`) can execute arbitrary code as root on the host. A crafted image ships `backup.yaml` as a symlink to a host file. When the root daemon writes the instance's backup file, it follows the symlink. Version 7.3.0 patches the issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| incus 7.3 | earliest → < 7.3.0 | 7.3.0 |
References
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of incus
The 47 CVEs of incus →
CVE-2026-115378
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in…
6.9
Medium
CVE-2026-115377
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that…
9.4
Critical
CVE-2026-115376
Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows…
8.3
High
CVE-2026-115375
Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes
9.4
Critical