lxc incus
47 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-115378 | < 6.0.7 ; 6.1.0 – < 7.0.2 ; 7.1.0 – < 7.5.0 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull | MEDIUM 6.9 | 0.3 % | ||
| CVE-2026-115377 | < 6.0.7 ; 6.1.0 – < 7.0.2 ; 7.1.0 – < 7.5.0 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream | CRITICAL 9.4 | 0.4 % | ||
| CVE-2026-115376 | 7.0.1 – < 7.0.2 ; 7.2.0 – < 7.5.0 | Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy | HIGH 8.3 | 0.3 % | ||
| CVE-2026-115375 | 7.0.0 – < 7.0.2 ; 7.1.0 – < 7.5.0 | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes | CRITICAL 9.4 | 0.4 % | ||
| CVE-2026-115374 | 7.0.0 – < 7.0.2 ; 7.1.0 – < 7.5.0 | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLs | HIGH 7.1 | 0.2 % | ||
| CVE-2026-115373 | < 6.0.7 ; 6.1.0 – < 7.0.2 ; 7.1.0 – < 7.5.0 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid} | HIGH 7.0 | 0.3 % | ||
| CVE-2026-115372 | 7.3.0 – < 7.5.0 | Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options | CRITICAL 9.0 | 0.4 % | ||
| CVE-2026-115371 | 6.0.3 – < 6.0.7 ; 6.6.0 – < 7.0.2 ; 7.1.0 – < 7.5.0 | LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpoints | HIGH 7.1 | 0.2 % | ||
| CVE-2026-115370 | 6.0.5 – < 6.0.7 ; 6.12.0 – < 7.0.2 ; 7.1.0 – < 7.5.0 | Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-63343 | < 7.3.0 | Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-63125 | < 7.3.0 | Incus vulnerable to root RCE via image backup.yaml symlink | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-62941 | < 7.3.0 | Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-62940 | < 7.3.0 | Incus has a project restriction bypass via instance migration config override | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-62867 | < 7.3.0 | Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-62313 | < 7.3.0 | Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated` | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-55622 | < 7.2.0 | Incus has a project restriction bypass in instance copy across projects | HIGH 7.7 | 0.3 % | ||
| CVE-2026-55621 | < 7.2.0 | Incus has a project restriction bypass for custom volume copy across projects | HIGH 7.7 | 0.3 % | ||
| CVE-2026-48769 | < 7.2.0 | Incus has an arbitrary file write on its client due to trusted image hash | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-48755 | < 7.2.0 | Incus has an argument injection in backup compression algorithm leading to AFW and ACE | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-48754 | < 7.1.0 | Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} | LOW 2.1 | 0.4 % | ||
| CVE-2026-48753 | < 7.1.0 | Incus has an arbitrary file write via path traversal in S3 multipart upload | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-48752 | < 7.2.0 | Incus has arbitrary file read+write on host via templates/ symlink in malicious image | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-48751 | < 7.2.0 | Incus has a restricted project bypass leading to arbitrary command execution | CRITICAL 9.9 | 0.6 % | ||
| CVE-2026-48750 | < 7.2.0 | Incus has an arbitrary file write on host via `exec-output` symlink in crafted image | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-48749 | < 7.2.0 | Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-47753 | < 7.1.0 | Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) | MEDIUM 4.4 | 0.2 % | ||
| CVE-2026-48756 | < 7.1.0 | Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) | LOW 2.1 | 0.4 % | ||
| CVE-2026-41685 | < 7.0.0 | Incus: Unbounded binary import disk exhaustion | MEDIUM 4.3 | 0.3 % | ||
| CVE-2026-41684 | < 7.0.0 | Incus: Nil Dereferences on Restore via Malformed YAML | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-41648 | < 7.0.0 | Incus: Unbounded YAML Metadata Decode via Parsing | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-41647 | < 7.0.0 | Incus: Nil-Pointer Dereference via S3 Bucket Import | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-40251 | < 7.0.0 | Incus out-of-bounds panic in snapshot metadata handling allows denial of service | HIGH 7.1 | 0.4 % | ||
| CVE-2026-40243 | < 7.0.0 | Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation | LOW 2.3 | 0.2 % | ||
| CVE-2026-40197 | < 7.0.0 | Incus nil-pointer dereference in custom volume import allows denial of service | HIGH 7.1 | 0.4 % | ||
| CVE-2026-40195 | < 7.0.0 | Incus nil-pointer dereference in storage bucket import allows denial of service | HIGH 7.1 | 0.4 % | ||
| CVE-2026-35527 | < 7.0.0 | Incus blind SSRF via image import preflight HEAD request | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-33945 | < 6.23.0 | Abitrary file write through systemd-creds option | CRITICAL 10.0 | 0.5 % | ||
| CVE-2026-33898 | < 6.23.0 | Local Incus UI web server vulnerable to nuthentication bypass | HIGH 8.8 | 0.4 % | ||
| CVE-2026-33897 | < 6.23.0 | Incus vulnerable to arbitrary file read and write through pongo templates | CRITICAL 10.0 | 0.5 % | ||
| CVE-2026-33743 | < 6.23.0 | Incus vulnerable to denial of source through crafted bucket backup file | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-33711 | < 6.23.0 | Incus vulnerable to local privilege escalation through VM screenshot path | MEDIUM 4.7 | 0.4 % | ||
| CVE-2026-33542 | < 6.23.0 | Incus does not verify combined fingerprint when downloading images from simplestreams servers | MEDIUM 5.7 | 0.2 % | ||
| CVE-2026-23954 | >= 6.1.0, <= 6.20.0 ; <= 6.0.5 | Incus container image templating arbitrary host file read and write | HIGH 8.7 | 0.8 % | ||
| CVE-2026-23953 | >= 6.1.0, <= 6.20.0 ; <= 6.0.5 | Incus container environment configuration newline injection | HIGH 8.7 | 0.5 % | ||
| CVE-2025-64507 | < 6.0.6 ; >= 6.1.0, < 6.19.0 | Incus vulnerable to local privilege escalation through custom storage volumes | HIGH 8.6 | 0.2 % | ||
| CVE-2025-52890 | >= 6.12, <= 6.13 | Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs | HIGH 8.1 | 0.2 % | ||
| CVE-2025-52889 | >= 6.12, <= 6.13 | Incus vulnerable to DoS through antispoofing nftables firewall rule bypass on bridge networks with ACLs | LOW 3.4 | 0.3 % |