{"id":"CVE-2026-115376","kind":"vulnerability","aliases":["CVE-2026-115376"],"related":[],"title":"Incus: project-restricted clients can copy other projects' storage volumes","description":"Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows project-restricted clients to copy volumes by omitting source.type. Attackers can send crafted POST requests to the custom volumes endpoint with a chosen source.project to copy and read other projects' volumes, snapshots, and configuration.","summary":"Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 let a project-restricted client copy storage volumes by omitting source.type in a crafted POST to the custom volumes endpoint. An attacker can name another project as the source and read that project's volumes, snapshots and configuration.","severity":"high","cvss":8.3,"epss":0.00273,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["incus","infrastructure","linux-containers","multi-tenant","self-hosted"],"not_affected_if":["default-config","single-tenant"],"how_to_check":"- Run `incus version` on the Incus server and compare against the fixed releases.\n- Check whether any client identities are restricted to a project (`incus auth identity list` or the project restrictions on your trust entries).","fix":"- Upgrade Incus to `7.0.2` if on the 7.0.x line, or to `7.5.0` if on the 7.2.x line.","status":"open","published_at":"2026-10-22T19:17:44+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","triaged_at":"2026-10-25T03:02:10+00:00","updated_at":"2026-10-25T03:02:10+00:00","category":"infrastructure","confidence":0.8,"triage":{"at":"2026-10-25T03:02:10Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Incus to `7.0.2` if on the 7.0.x line, or to `7.5.0` if on the 7.2.x line.","reach":"network","title":"Incus: project-restricted clients can copy other projects' storage volumes","impact":"medium","summary":"Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 let a project-restricted client copy storage volumes by omitting source.type in a crafted POST to the custom volumes endpoint. An attacker can name another project as the source and read that project's volumes, snapshots and configuration.","category":"infrastructure","nicknames":[],"who_cares":["incus","self-hosted","linux-containers","multi-tenant"],"confidence":0.8,"needs_auth":"yes","worst_case":"Attacker reads another project's volumes, snapshots and configuration.","analyst_note":"Check the NVD and Incus upstream advisory for whether the fixed versions and the restricted-client precondition are confirmed, and whether a workaround exists short of upgrading.","how_to_check":"- Run `incus version` on the Incus server and compare against the fixed releases.\n- Check whether any client identities are restricted to a project (`incus auth identity list` or the project restrictions on your trust entries).","needs_analyst":true,"not_affected_if":["default-config","single-tenant"],"who_is_affected":"Deployments running Incus 7.0.1 through 7.0.2 (exclusive) or 7.2.0 through 7.5.0 (exclusive) where some clients are restricted to a single project. Installs where every client is unrestricted or only the admin uses Incus are less exposed, since the bypass starts from a project-restricted identity.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000651,"input_tokens":3398,"output_tokens":622,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-115376':14A,17A '-2026':13A,16A '7.0.1':30B,77C '7.0.2':32B,79C '7.2.0':34B,81C '7.5.0':36B,83C 'allow':90C 'anoth':62B 'attack':59B,101C 'author':86C 'bypass':87C 'chosen':114C 'client':5A,42B,94C 'configur':75B,125C 'contain':22B,84C 'copi':7A,43B,96C,117C 'craft':51B,104C 'custom':55B,109C 'cve':12A,15A 'endpoint':57B,111C 'host':28B 'incus':1A,18B,29B,76C 'infrastructur':19B 'let':37B 'linux':21B 'linux-contain':20B 'multi':24B 'multi-ten':23B 'name':61B 'omit':47B,99C 'post':52B,105C 'project':3A,9A,40B,63B,70B,92C,121C 'project-restrict':2A,39B,91C 'read':68B,119C 'request':106C 'restrict':4A,41B,93C 'self':27B 'self-host':26B 'send':103C 'snapshot':73B,123C 'sourc':66B 'source.project':115C 'source.type':48B,100C 'storag':10A,44B 'tenant':25B 'volum':11A,45B,56B,72B,97C,110C,122C 'vulner':88C","nicknames":[],"mitigations":[],"who_affected":"Deployments running Incus 7.0.1 through 7.0.2 (exclusive) or 7.2.0 through 7.5.0 (exclusive) where some clients are restricted to a single project. Installs where every client is unrestricted or only the admin uses Incus are less exposed, since the bypass starts from a project-restricted identity.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-22T19:17:44+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-115376","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115376","severity":null,"published_at":"2026-10-22T19:17:44+00:00","modified_at":"2026-10-23T17:06:36+00:00","first_seen_at":"2026-10-23T21:57:31+00:00","fetched_at":"2026-10-23T22:29:02+00:00","note":null},{"source":"epss","external_id":"CVE-2026-115376","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-115376","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T07:15:51+00:00","fetched_at":"2026-10-24T07:15:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}