Product by Go
Github.com/lxc/incus/v6
10 known vulnerabilities in Github.com/lxc/incus/v6 (Go), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-33897 | Incus vulnerable to arbitrary file read and write through pongo templates | 10.0 | |
| Critical | CVE-2026-33945 | Abitrary file write through systemd-creds option | 10.0 | |
| High | CVE-2026-23953 | Incus container environment configuration newline injection | 8.7 | |
| High | CVE-2026-55622 | Incus has a project restriction bypass in instance copy across projects | 7.7 | |
| High | CVE-2026-55621 | Incus has a project restriction bypass for custom volume copy across projects | 7.7 | |
| High | CVE-2026-33711 | Incus vulnerable to local privilege escalation through VM screenshot path | 7.8 | |
| Medium | CVE-2026-33743 | Incus vulnerable to denial of source through crafted bucket backup file | 6.5 | |
| High | CVE-2025-64507 | Incus vulnerable to local privilege escalation through custom storage volumes | 7.8 | |
| High | CVE-2025-52890 | Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs | 8.1 | |
| Low | CVE-2025-52889 | Lxc Incus: Allocation of Resources Without Limits or Throttling | 3.4 |