CVE-2026-33897 PUBLISHED CVSS 10 CRITICAL

Incus vulnerable to arbitrary file read and write through pongo templates

EPSS 0.05% · 14.7th percentile

Risk Scores

CVSS v3.1
10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS Score
0.05%
14.7th percentile

Affected Products

VendorProductVersions
lxcincus< 6.23.0, < 6.23.0, < 6.23.0
github.comlxc/incus/v60, 0, 0
linuxcontainersincus0
github.comlxc/incus0, 0, 0

Timeline

References

Open in Interactive Console →