CVE-2026-48752Escape de contenedor a host en Incus mediante imágenes maliciosas
Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 patches the issue.
Ver en NVDAnálisis
Incus (successor to LXD) is vulnerable to a host filesystem escape via crafted images or backups. This allows an attacker to read or write arbitrary files on the host system, potentially leading to full remote code execution on the host.
Roles relevantes
Severidad
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HCWE-73EPSS
Sin puntaje EPSS aún (CVE muy reciente).
Descripción técnica
Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 patches the issue.