LXC vulnerabilities
51 CVEs and advisories name LXC as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-41684Incus: Nil Dereferences on Restore via Malformed YAML
- CVE-2026-41648Incus: Unbounded YAML Metadata Decode via Parsing
- CVE-2026-41647Incus: Nil-Pointer Dereference via S3 Bucket Import
- CVE-2026-40251Incus out-of-bounds panic in snapshot metadata handling allows denial of service
- CVE-2026-40243Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation
- CVE-2026-40197Incus nil-pointer dereference in custom volume import allows denial of service
- CVE-2026-40195Incus nil-pointer dereference in storage bucket import allows denial of service
- CVE-2026-39402lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion
- CVE-2026-35527Incus blind SSRF via image import preflight HEAD request
- CVE-2026-33945Abitrary file write through systemd-creds option
- CVE-2026-33898Local Incus UI web server vulnerable to nuthentication bypass
- CVE-2026-33897Incus vulnerable to arbitrary file read and write through pongo templates
- CVE-2026-33743Incus vulnerable to denial of source through crafted bucket backup file
- CVE-2026-33711Incus vulnerable to local privilege escalation through VM screenshot path
- CVE-2026-33542Incus does not verify combined fingerprint when downloading images from simplestreams servers
- CVE-2026-32606IncusOS has a LUKS encryption bypass due to insufficient TPM policy
- CVE-2026-23954Incus container image templating arbitrary host file read and write
- CVE-2026-23953Incus container environment configuration newline injection
- CVE-2025-64507Incus vulnerable to local privilege escalation through custom storage volumes
- CVE-2025-52890Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs
- CVE-2025-52889Incus vulnerable to DoS through antispoofing nftables firewall rule bypass on bridge networks with ACLs