Skip to content

Vulnerabilities of lxc incus

Is your version affected?

CVE Summary Score Published
CVE-2026-115377 Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that… 9.4 Critical Oct 22, 2026
CVE-2026-115375 Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes 9.4 Critical Oct 22, 2026
CVE-2026-115372 Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set… 9.0 Critical Oct 22, 2026
CVE-2026-63343 Incus is a system container and virtual machine manager 9.9 Critical Aug 21, 2026
CVE-2026-63125 Incus is a system container and virtual machine manager 9.9 Critical Aug 21, 2026
CVE-2026-62941 Incus is a system container and virtual machine manager 9.9 Critical Aug 21, 2026
CVE-2026-62940 Incus is a system container and virtual machine manager 9.9 Critical Aug 21, 2026
CVE-2026-62867 Incus is a system container and virtual machine manager 9.9 Critical Aug 21, 2026
CVE-2026-48769 Incus has an arbitrary file write on its client due to trusted image hash 9.9 Critical Aug 21, 2026
CVE-2026-48755 Incus has an argument injection in backup compression algorithm leading to AFW and ACE 9.9 Critical Aug 21, 2026
CVE-2026-48753 Incus is a system container and virtual machine manager 9.9 Critical Aug 21, 2026
CVE-2026-48752 Incus has arbitrary file read+write on host via templates/ symlink in malicious image 9.9 Critical Aug 21, 2026
CVE-2026-48751 Incus has a restricted project bypass leading to arbitrary command execution 9.9 Critical Aug 21, 2026
CVE-2026-48750 Incus has an arbitrary file write on host via `exec-output` symlink in crafted image 9.9 Critical Aug 21, 2026
CVE-2026-48749 Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image 9.9 Critical Aug 21, 2026
CVE-2026-33945 Incus is a system container and virtual machine manager 10.0 Critical Mar 26, 2026
CVE-2026-33897 Incus is a system container and virtual machine manager 10.0 Critical Mar 26, 2026

Other lxc products