LXC vulnerabilities
51 CVEs and advisories name LXC as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-100395LXC: lxc-copy host-context hostname update follows symlink
- CVE-2026-115378Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull
- CVE-2026-115377Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream
- CVE-2026-115376Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy
- CVE-2026-115375Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes
- CVE-2026-115374Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLs
- CVE-2026-115373Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid}
- CVE-2026-115372Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options
- CVE-2026-115371LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpoints
- CVE-2026-115370Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh
- CVE-2026-52727lxc-ci: Pacman keyring stored in archlinux image with a private key
- CVE-2026-63343Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root
- CVE-2026-63125Incus vulnerable to root RCE via image backup.yaml symlink
- CVE-2026-62941Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge
- CVE-2026-62940Incus has a project restriction bypass via instance migration config override
- CVE-2026-62867Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution
- CVE-2026-62313Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`
- CVE-2026-55622Incus has a project restriction bypass in instance copy across projects
- CVE-2026-55621Incus has a project restriction bypass for custom volume copy across projects
- CVE-2026-48769Incus has an arbitrary file write on its client due to trusted image hash
- CVE-2026-48755Incus has an argument injection in backup compression algorithm leading to AFW and ACE
- CVE-2026-48754Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}
- CVE-2026-48753Incus has an arbitrary file write via path traversal in S3 multipart upload
- CVE-2026-48752Incus has arbitrary file read+write on host via templates/ symlink in malicious image
- CVE-2026-48751Incus has a restricted project bypass leading to arbitrary command execution
- CVE-2026-48750Incus has an arbitrary file write on host via `exec-output` symlink in crafted image
- CVE-2026-48749Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image
- CVE-2026-47753Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted)
- CVE-2026-48756Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)
- CVE-2026-41685Incus: Unbounded binary import disk exhaustion