Lxc Incus vulnerabilities

CVE-2026-33542 [MEDIUM] CWE-295 CVE-2026-33542: Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validati Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint when downloading from simplestreams image servers opens the door to image cache poisoning and under very narrow circumstances exposes other tenants to running attacker controlled images rather than the expected one. Version

CVE-2026-41685 [MEDIUM] CWE-770 CVE-2026-41685: Incus is a system container and virtual machine manager. Prior to version 7.0.0, uploads of large am Incus is a system container and virtual machine manager. Prior to version 7.0.0, uploads of large amount of data by authenticated users can run the Incus server out of disk space, potentially taking down the host system. The impact here is limited for anyone using storage.images_volume and storage.backups_volume as those users will have large upload

CVE-2026-47753 [MEDIUM] CWE-476 CVE-2026-47753: Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).CreateI Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).CreateInstanceFromBackup` in `internal/server/storage/backend.go` contains a nil-pointer dereference that an authenticated user with permission to create instances in any project can trigger remotely by uploading a crafted backup tarball. The Incus daemon pa

CVE-2026-62313 [MEDIUM] CWE-863 CVE-2026-62313: Incus is a system container and virtual machine manager. Prior to version 7.3.0, project-level enfor Incus is a system container and virtual machine manager. Prior to version 7.3.0, project-level enforcement of `restricted.containers.privilege=isolated` can be trivially bypassed, allowing a user to create a non-isolated (shared host idmap) container in a project that is configured to forbid them. The restriction only rejects an explicitly set `secu

CVE-2026-48754 [LOW] CWE-476 CVE-2026-48754: Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).createD Incus is a system container and virtual machine manager. Prior to version 7.1.0, `(*backend).createDependentVolumesFromBackup` in `internal/server/storage/backend.go` contains a cluster of unguarded pointer derefs on every dependent-volume entry's `VolumeSnapshots[i]`, `Volume`, and `Pool` sub-fields. An authenticated user with `can_create_instances` p

CVE-2025-52889 [LOW] CWE-770 CVE-2025-52889: Incus is a system container and virtual machine manager. When using an ACL on a device connected to Incus is a system container and virtual machine manager. When using an ACL on a device connected to a bridge, Incus version 6.12 and 6.13 generates nftables rules for local services (DHCP, DNS...) that partially bypass security options `security.mac_filtering`, `security.ipv4_filtering` and `security.ipv6_filtering`. This can lead to DHCP pool exhaustio