Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream

Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes

Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

Incus vulnerable to root RCE via image backup.yaml symlink

Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge

Incus has a project restriction bypass via instance migration config override

Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution

Incus has an arbitrary file write on its client due to trusted image hash

Incus has an argument injection in backup compression algorithm leading to AFW and ACE

Incus has an arbitrary file write via path traversal in S3 multipart upload

Incus has arbitrary file read+write on host via templates/ symlink in malicious image

Incus has a restricted project bypass leading to arbitrary command execution

Incus has an arbitrary file write on host via `exec-output` symlink in crafted image

Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image

Incus vulnerable to arbitrary file read and write through pongo templates

Abitrary file write through systemd-creds option