Login Request a demo
LX
Vendor
lxc
4 products with CVEs on record
50
CVEs
0
On KEV
9
New 30D
Products
IN
incus
lxc
9.9
47 CVEs0 on KEV9 new
IN
incus-os
lxc
7.6
1 CVEs0 on KEV0 new
LX
lxc
lxc
6.5
1 CVEs0 on KEV0 new
LX
lxc-ci
lxc
7.2
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115378
New
IN
incus
lxc
5.8
0%
Oct 22Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull
CVE-2026-115377
New
IN
incus
lxc
9.9
0%
Oct 22Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream
CVE-2026-115376
New
IN
incus
lxc
7.7
0%
Oct 22Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy
CVE-2026-115375
New
IN
incus
lxc
9.9
0%
Oct 22Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes
CVE-2026-115374
New
IN
incus
lxc
7.1
0%
Oct 22Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLs
CVE-2026-115373
New
IN
incus
lxc
6.3
0%
Oct 22Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid}
CVE-2026-115372
New
IN
incus
lxc
8.5
0%
Oct 22Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options
CVE-2026-115371
New
IN
incus
lxc
7.1
0%
Oct 22LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpoints
CVE-2026-115370
New
IN
incus
lxc
4.3
0%
Oct 22Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh
CVE-2026-52727
LX
lxc-ci
lxc
7.2
1%
Sep 17lxc-ci: Pacman keyring stored in archlinux image with a private key
CVE-2026-63343
IN
incus
lxc
9.9
0%
Aug 21Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root
CVE-2026-63125
IN
incus
lxc
9.9
1%
Aug 21Incus vulnerable to root RCE via image backup.yaml symlink
CVE-2026-62941
IN
incus
lxc
9.9
0%
Aug 21Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge
CVE-2026-62940
IN
incus
lxc
9.9
0%
Aug 21Incus has a project restriction bypass via instance migration config override
CVE-2026-62867
IN
incus
lxc
9.9
1%
Aug 21Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution
CVE-2026-62313
IN
incus
lxc
4.3
0%
Aug 21Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`
CVE-2026-55622
IN
incus
lxc
7.7
0%
Aug 21Incus has a project restriction bypass in instance copy across projects
CVE-2026-55621
IN
incus
lxc
7.7
0%
Aug 21Incus has a project restriction bypass for custom volume copy across projects
CVE-2026-48769
IN
incus
lxc
9.9
1%
Aug 21Incus has an arbitrary file write on its client due to trusted image hash
CVE-2026-48755
IN
incus
lxc
9.9
1%
Aug 21Incus has an argument injection in backup compression algorithm leading to AFW and ACE
CVE-2026-48754
IN
incus
lxc
2.1
0%
Aug 21Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}
CVE-2026-48753
IN
incus
lxc
9.9
1%
Aug 21Incus has an arbitrary file write via path traversal in S3 multipart upload
CVE-2026-48752
IN
incus
lxc
9.9
1%
Aug 21Incus has arbitrary file read+write on host via templates/ symlink in malicious image
CVE-2026-48751
IN
incus
lxc
9.9
1%
Aug 21Incus has a restricted project bypass leading to arbitrary command execution
CVE-2026-48750
IN
incus
lxc
9.9
1%
Aug 21Incus has an arbitrary file write on host via `exec-output` symlink in crafted image
CVE-2026-48749
IN
incus
lxc
9.9
1%
Aug 21Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image
CVE-2026-47753
IN
incus
lxc
4.4
0%
Aug 21Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted)
CVE-2026-48756
IN
incus
lxc
2.1
0%
Aug 21Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)
CVE-2026-41685
IN
incus
lxc
4.3
0%
May 7Incus: Unbounded binary import disk exhaustion
CVE-2026-41684
IN
incus
lxc
6.5
0%
May 7Incus: Nil Dereferences on Restore via Malformed YAML
CVE-2026-41648
IN
incus
lxc
5.0
0%
May 7Incus: Unbounded YAML Metadata Decode via Parsing
CVE-2026-41647
IN
incus
lxc
6.5
0%
May 7Incus: Nil-Pointer Dereference via S3 Bucket Import
CVE-2026-40251
IN
incus
lxc
6.5
0%
May 6Incus out-of-bounds panic in snapshot metadata handling allows denial of service
CVE-2026-40243
IN
incus
lxc
4.8
0%
May 6Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation
CVE-2026-40197
IN
incus
lxc
6.5
0%
May 6Incus nil-pointer dereference in custom volume import allows denial of service
CVE-2026-40195
IN
incus
lxc
6.5
0%
May 6Incus nil-pointer dereference in storage bucket import allows denial of service
CVE-2026-39402
LX
lxc
lxc
6.5
0%
May 5lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion
CVE-2026-35527
IN
incus
lxc
5.0
0%
May 5Incus blind SSRF via image import preflight HEAD request
CVE-2026-33945
IN
incus
lxc
9.6
0%
Mar 26Abitrary file write through systemd-creds option
CVE-2026-33898
IN
incus
lxc
8.8
0%
Mar 26Local Incus UI web server vulnerable to nuthentication bypass
CVE-2026-33897
IN
incus
lxc
9.9
0%
Mar 26Incus vulnerable to arbitrary file read and write through pongo templates
CVE-2026-33743
IN
incus
lxc
6.5
0%
Mar 26Incus vulnerable to denial of source through crafted bucket backup file
CVE-2026-33711
IN
incus
lxc
7.8
0%
Mar 26Incus vulnerable to local privilege escalation through VM screenshot path
CVE-2026-33542
IN
incus
lxc
4.8
0%
Mar 26Incus does not verify combined fingerprint when downloading images from simplestreams servers
CVE-2026-32606
IN
incus-os
lxc
7.6
0%
Mar 18IncusOS has a LUKS encryption bypass due to insufficient TPM policy
CVE-2026-23954
IN
incus
lxc
8.7
1%
Jan 22Incus container image templating arbitrary host file read and write
CVE-2026-23953
IN
incus
lxc
8.7
0%
Jan 22Incus container environment configuration newline injection
CVE-2025-64507
IN
incus
lxc
7.8
0%
Nov 10Incus vulnerable to local privilege escalation through custom storage volumes
CVE-2025-52890
IN
incus
lxc
8.1
0%
Jun 25Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs
CVE-2025-52889
IN
incus
lxc
3.4
0%
Jun 25Incus vulnerable to DoS through antispoofing nftables firewall rule bypass on bridge networks with ACLs