{"id":"CVE-2026-115370","kind":"vulnerability","aliases":["CVE-2026-115370"],"related":[],"title":"Incus: restricted project users can make the server probe internal services","description":"Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerability that allows restricted project users to use pull mode migration via clustered refresh requests. Attackers with instance creation rights can send a refresh migration request for an existing instance to make the server open outbound TLS websocket connections and probe reachable services.","summary":"Restricted project users in Incus, a container and VM manager, can abuse clustered refresh requests to switch on pull mode migration. An attacker with instance creation rights can then make the server open outbound TLS websocket connections and probe services it can reach.","severity":"medium","cvss":5.3,"epss":0.00299,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["clusters","incus","infrastructure","lxd-users","self-hosted"],"not_affected_if":["admin-only-instance-creation","default-config","no-restricted-projects"],"how_to_check":"- Run `incus version` on each Incus server or cluster member and compare against the fixed releases.\n- Check whether restricted projects are in use with `incus project list` and whether users in them can create instances.","fix":"- Upgrade Incus 6.0.x to `6.0.7` or later.\n- Upgrade Incus 6.12.x to `7.0.2` or later.\n- Upgrade Incus 7.1.x to `7.5.0` or later.","status":"open","published_at":"2026-10-22T19:17:43+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","triaged_at":"2026-10-25T04:19:03+00:00","updated_at":"2026-10-25T04:19:03+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-25T04:19:03Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Incus 6.0.x to `6.0.7` or later.\n- Upgrade Incus 6.12.x to `7.0.2` or later.\n- Upgrade Incus 7.1.x to `7.5.0` or later.","reach":"network","title":"Incus: restricted project users can make the server probe internal services","impact":"low","summary":"Restricted project users in Incus, a container and VM manager, can abuse clustered refresh requests to switch on pull mode migration. An attacker with instance creation rights can then make the server open outbound TLS websocket connections and probe services it can reach.","category":"infrastructure","nicknames":[],"who_cares":["incus","self-hosted","lxd-users","clusters"],"confidence":0.7,"needs_auth":"yes","worst_case":"Server probes internal services through outbound connections from the host","analyst_note":"","how_to_check":"- Run `incus version` on each Incus server or cluster member and compare against the fixed releases.\n- Check whether restricted projects are in use with `incus project list` and whether users in them can create instances.","needs_analyst":false,"not_affected_if":["default-config","no-restricted-projects","admin-only-instance-creation"],"who_is_affected":"Clusters and servers running Incus 6.0.5 through 6.0.6, 6.12.0 through 7.0.1, or 7.1.0 through 7.4.x are exposed when restricted projects let users create instances. Single-user hosts without restricted projects, or where only trusted administrators can create instances, carry much less risk.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000626,"input_tokens":3423,"output_tokens":568,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-115370':14A,17A '-2026':13A,16A '6.0.5':71C '6.0.7':73C '6.12.0':74C '7.0.2':76C '7.1.0':78C '7.5.0':80C 'abus':38B 'allow':87C 'attack':49B,100C 'bypass':84C 'cluster':18B,39B,97C 'connect':63B,123C 'contain':33B,81C 'creation':52B,103C 'cve':12A,15A 'exist':113C 'host':26B 'incus':1A,19B,31B,70C 'infrastructur':20B 'instanc':51B,102C,114C 'intern':10A 'lxd':22B 'lxd-user':21B 'make':6A,56B,116C 'manag':36B 'migrat':47B,95C,109C 'mode':46B,94C 'open':59B,119C 'outbound':60B,120C 'probe':9A,65B,125C 'project':3A,28B,89C 'pull':45B,93C 'reach':69B 'reachabl':126C 'refresh':40B,98C,108C 'request':41B,99C,110C 'restrict':2A,27B,83C,88C 'right':53B,104C 'self':25B 'self-host':24B 'send':106C 'server':8A,58B,118C 'servic':11A,66B,127C 'switch':43B 'tls':61B,121C 'use':92C 'user':4A,23B,29B,90C 'via':96C 'vm':35B 'vulner':85C 'websocket':62B,122C","nicknames":[],"mitigations":[],"who_affected":"Clusters and servers running Incus 6.0.5 through 6.0.6, 6.12.0 through 7.0.1, or 7.1.0 through 7.4.x are exposed when restricted projects let users create instances. Single-user hosts without restricted projects, or where only trusted administrators can create instances, carry much less risk.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:17:43+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115370","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115370","severity":null,"published_at":"2026-10-22T19:17:43+00:00","modified_at":"2026-10-23T17:06:36+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-115370","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-115370","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}