Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream

Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes

Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

Incus vulnerable to root RCE via image backup.yaml symlink

Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge

Incus has a project restriction bypass via instance migration config override

Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution

Incus has an arbitrary file write on its client due to trusted image hash

Incus has an argument injection in backup compression algorithm leading to AFW and ACE

Incus has an arbitrary file write via path traversal in S3 multipart upload

Incus has arbitrary file read+write on host via templates/ symlink in malicious image

Incus has a restricted project bypass leading to arbitrary command execution

Incus has an arbitrary file write on host via `exec-output` symlink in crafted image

Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image

Incus vulnerable to arbitrary file read and write through pongo templates

Abitrary file write through systemd-creds option

Local Incus UI web server vulnerable to nuthentication bypass

Incus container image templating arbitrary host file read and write

Incus container environment configuration newline injection

Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options

Incus vulnerable to local privilege escalation through VM screenshot path

Incus vulnerable to local privilege escalation through custom storage volumes

Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy

Incus has a project restriction bypass in instance copy across projects

Incus has a project restriction bypass for custom volume copy across projects

Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLs

LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpoints

Incus: Nil Dereferences on Restore via Malformed YAML

Incus: Nil-Pointer Dereference via S3 Bucket Import

Incus out-of-bounds panic in snapshot metadata handling allows denial of service

Incus nil-pointer dereference in custom volume import allows denial of service

Incus nil-pointer dereference in storage bucket import allows denial of service

Incus vulnerable to denial of source through crafted bucket backup file

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid}

Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull

Incus: Unbounded YAML Metadata Decode via Parsing

Incus blind SSRF via image import preflight HEAD request

Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation

Incus does not verify combined fingerprint when downloading images from simplestreams servers

Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted)

Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh

Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`

Incus: Unbounded binary import disk exhaustion

Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}

Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7)