agentprime: lxc-incusEvery new CVE for lxc-incus.https://agentprime.io/CVE-2026-115378: Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pullhttps://agentprime.io/advisories/CVE-2026-115378/https://agentprime.io/advisories/CVE-2026-115378/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:47 GMTCVECVE-2026-115377: Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Streamhttps://agentprime.io/advisories/CVE-2026-115377/https://agentprime.io/advisories/CVE-2026-115377/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:46 GMTCVEcriticalCVE-2026-115376: Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copyhttps://agentprime.io/advisories/CVE-2026-115376/https://agentprime.io/advisories/CVE-2026-115376/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:45 GMTCVECVE-2026-115375: Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumeshttps://agentprime.io/advisories/CVE-2026-115375/https://agentprime.io/advisories/CVE-2026-115375/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:44 GMTCVEcriticalCVE-2026-115374: Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLshttps://agentprime.io/advisories/CVE-2026-115374/https://agentprime.io/advisories/CVE-2026-115374/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:43 GMTCVECVE-2026-115373: Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid}https://agentprime.io/advisories/CVE-2026-115373/https://agentprime.io/advisories/CVE-2026-115373/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:43 GMTCVECVE-2026-115372: Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_optionshttps://agentprime.io/advisories/CVE-2026-115372/https://agentprime.io/advisories/CVE-2026-115372/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:42 GMTCVEcriticalCVE-2026-115371: LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpointshttps://agentprime.io/advisories/CVE-2026-115371/https://agentprime.io/advisories/CVE-2026-115371/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:41 GMTCVECVE-2026-115370: Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refreshhttps://agentprime.io/advisories/CVE-2026-115370/https://agentprime.io/advisories/CVE-2026-115370/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 19:13:41 GMTCVECVE-2026-63343: Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as roothttps://agentprime.io/advisories/CVE-2026-63343/https://agentprime.io/advisories/CVE-2026-63343/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 14:53:26 GMTCVEcriticalCVE-2026-63125: Incus vulnerable to root RCE via image backup.yaml symlinkhttps://agentprime.io/advisories/CVE-2026-63125/https://agentprime.io/advisories/CVE-2026-63125/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 14:49:16 GMTCVEcriticalCVE-2026-62941: Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config mergehttps://agentprime.io/advisories/CVE-2026-62941/https://agentprime.io/advisories/CVE-2026-62941/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 14:47:56 GMTCVEcriticalCVE-2026-62940: Incus has a project restriction bypass via instance migration config overridehttps://agentprime.io/advisories/CVE-2026-62940/https://agentprime.io/advisories/CVE-2026-62940/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 14:47:13 GMTCVEcriticalCVE-2026-62867: Incus has an argument injection in storage volume block.create_options that leads to arbitrary command executionhttps://agentprime.io/advisories/CVE-2026-62867/https://agentprime.io/advisories/CVE-2026-62867/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 14:45:35 GMTCVEcriticalCVE-2026-62313: Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`https://agentprime.io/advisories/CVE-2026-62313/https://agentprime.io/advisories/CVE-2026-62313/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Aug 2026 14:44:27 GMTCVE