Live › vulnerability › CVE-2026-115372
Go to dashboardUsers in a restricted Incus project can set block.create_options on a storage volume through update, copy, or move operations, bypassing the project restriction. Triggering a copy or move onto a formatting pool injects arguments into mkfs, which runs as root, so an attacker can gain root on the host.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
incus --version
Upgrade Incus to 7.5.0 or later.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set block.create_options through volume update, copy, and move operations. Attackers can set the option on a custom volume and trigger a copy or move onto a formatting pool to inject arguments into mkfs executed as root.
This page as .md · .json · in your agent: get_signal("CVE-2026-115372")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.