Vulnerability GO-2026-5798
Advisory details are being prepared in the background.
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 months ago
July 07, 2026 at 04:41 PM UTC
Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image in github.com/lxc/incus
v0.1.0 - v0.7.0
v0.1.0 - v0.7.0
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
2 months ago
Incus has a project restriction bypass for custom volume copy across projects in github.com/lxc/incus
* GO-2026-6318
* GO-2026-6318
Unknown
2 months ago
Incus has a project restriction bypass for custom volume copy across projects in github.com/lxc/incus
* GO-2026-6318
* GO-2026-6318
Unknown
2 months ago
Incus has a project restriction bypass for custom volume copy across projects in github.com/lxc/incus
<7.2.0 GO-2026-6318
<7.2.0 GO-2026-6318
Unknown
2 months ago
Incus has a project restriction bypass in instance copy across projects in github.com/lxc/incus
* GO-2026-6319
* GO-2026-6319
Unknown
2 months ago
Incus has a project restriction bypass in instance copy across projects in github.com/lxc/incus
* GO-2026-6319
* GO-2026-6319
Impacted packages
Timeline
Published
4 months ago
July 07, 2026 at 04:41 PM UTC
Fixed (v7.2.0)
4 months ago
June 26, 2026 at 01:53 AM UTC
Last Modified
4 months ago
July 07, 2026 at 08:30 PM UTC