CVE-2026-41647

6.5 Moyenne

Publiée le 07/05/2026 à 16:16 · Modifiée le 17/06/2026 à 12:46 · Analysée par le NVD · Source : security-advisories@github.com

Description

Incus is a system container and virtual machine manager. Prior to version 7.0.0, a missing error handling could lead an authenticated Incus user to cause a daemon crash through the import of a truncated storage bucket backup file. This issue has been patched in version 7.0.0.

Traduire en français

Produits concernés

lxc incus
Linuxcontainers incus

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-476

Références

https://github.com/lxc/incus/releases/tag/v7.0.0 PatchProduct
https://github.com/lxc/incus/security/advisories/GHSA-fwj8-62r8-8p8m ExploitMitigationVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories