Advisories · Technology
lxc incus.
Every CVE that names lxc incus among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull
- lxc incus
- Path traversal
- CVSS 9.4 CriticalCritical · CVSS 9+
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream
- lxc incus
- Path traversal
- CVSS 8.3 High
Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy
- lxc incus
- Broken access control
- CVSS 9.4 CriticalCritical · CVSS 9+
Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes
- lxc incus
- Path traversal
- CVSS 7.1 High
Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLs
- lxc incus
- Weak cryptography or TLS
- CVSS 7.0 High
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid}
- lxc incus
- Broken access control
- CVSS 9.0 CriticalCritical · CVSS 9+
Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options
- lxc incus
- Command injection
- CVSS 7.1 High
LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpoints
- lxc incus
- Hard-coded credentials
- CVSS 5.3 Medium
Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh
- lxc incus
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root
- lxc incus
- Path traversal
- CVSS 9.9 CriticalCritical · CVSS 9+
Incus vulnerable to root RCE via image backup.yaml symlink
- lxc incus
- Path traversal
- CWE-61
- CVSS 9.9 CriticalCritical · CVSS 9+
Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge
- lxc incus
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
Incus has a project restriction bypass via instance migration config override
- lxc incus
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution
- lxc incus
- Command injection
- CVSS 4.3 Medium
Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`
- lxc incus
- Broken access control