---
id: "CVE-2026-115370"
kind: "vulnerability"
aliases: ["CVE-2026-115370"]
title: "Incus: restricted project users can make the server probe internal services"
severity: "medium"
cvss: 5.3
epss: 0.00299
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["clusters", "incus", "infrastructure", "lxd-users", "self-hosted"]
not_affected_if: ["admin-only-instance-creation", "default-config", "no-restricted-projects"]
published_at: "2026-10-22T19:17:43+00:00"
first_seen_at: "2026-10-23T21:57:31+00:00"
updated_at: "2026-10-25T04:19:03+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-115370", "first_seen_at": "2026-10-23T21:57:31+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-115370", "first_seen_at": "2026-10-24T07:15:51+00:00"}]
---

# Incus: restricted project users can make the server probe internal services

Restricted project users in Incus, a container and VM manager, can abuse clustered refresh requests to switch on pull mode migration. An attacker with instance creation rights can then make the server open outbound TLS websocket connections and probe services it can reach.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `incus version` on each Incus server or cluster member and compare against the fixed releases.
- Check whether restricted projects are in use with `incus project list` and whether users in them can create instances.

## Fix

- Upgrade Incus 6.0.x to `6.0.7` or later.
- Upgrade Incus 6.12.x to `7.0.2` or later.
- Upgrade Incus 7.1.x to `7.5.0` or later.

## Timeline

- 2026-10-23T21:57:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-115370
- 2026-10-24T07:15:51+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-115370

## From the sources

Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerability that allows restricted project users to use pull mode migration via clustered refresh requests. Attackers with instance creation rights can send a refresh migration request for an existing instance to make the server open outbound TLS websocket connections and probe reachable services.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_