CVE-2026-115375
Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows…
- Risk score
- 66/100
- CVSS
- 9.9 v3.1
- Exploit chance (30 days)
- 0.4%
- Published
- 22 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Incus versions 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contain a path traversal vulnerability that allows clients to write files on the host. An attacker can create a crafted instance backup to create root-owned directories with controlled content, leading to full host compromise.
- Affected
- {'products': ['Incus'], 'packages': [], 'versions': ['7.0.0 before 7.0.2', '7.1.0 before 7.5.0']}
- Fix
- Upgrade to version 7.0.2 or later, or 7.5.0 or later
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.9 critical
References
Original description
Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to create instances to write files on the host. The flaw stems from unvalidated dependent custom volume names in instance backup index.yaml files. Attackers can import a crafted instance backup with ../ sequences in dependent volume names to create root-owned directories with controlled content, leading to full host compromise.
Last activity 22 Oct 2026. Patch Forecast updates every hour.