Product by Go
Github.com/lxc/incus/v7/cmd/incusd
9 known vulnerabilities in Github.com/lxc/incus/v7/cmd/incusd (Go), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-48769 | Incus has an arbitrary file write on its client due to trusted image hash | 9.9 | |
| Critical | CVE-2026-48755 | Incus has an argument injection in backup compression algorithm leading to AFW and ACE | 9.9 | |
| Critical | CVE-2026-48753 | Incus has an arbitrary file write via path traversal in S3 multipart upload | 9.9 | |
| Critical | CVE-2026-48752 | Incus has arbitrary file read+write on host via templates/ symlink in malicious image | 9.9 | |
| Critical | CVE-2026-48750 | Incus has an arbitrary file write on host via `exec-output` symlink in crafted image | 9.9 | |
| Critical | CVE-2026-48749 | Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image | 9.9 | |
| Critical | CVE-2026-48751 | Incus has a restricted project bypass leading to arbitrary command execution | 9.9 | |
| Low | CVE-2026-48754 | Lxc Incus: NULL Pointer Dereference | — | |
| Low | CVE-2026-48756 | Lxc Incus: NULL Pointer Dereference | — |