Live › vulnerability › CVE-2026-115377
Go to dashboardIncus hands migration streams (copy, move, refresh, push, pull) to rsync, or to btrfs receive, which follow symlinks on the host. A malicious source, or any client allowed to create instances or custom volumes in a project, can plant a symlink such as rootfs pointing at / and write arbitrary files as root, which means full host compromise. VMs are also hit through root.img. All rsync-based storage drivers and optimized btrfs are affected. Optimized ZFS transfers are not. The symlink check added in 7.3 runs after the transfer, so it does not help. Releases before 7.3.0 also allow host file reads. It is not unauthenticated: it needs a low-privilege authenticated client or a malicious or compromised migration peer.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| incus | vendor | >= 0, < 6.0.7; >= 6.1.0, < 7.0.2; >= 7.1.0, < 7.5.0 | 6.0.7, 7.0.2, 7.5.0 |
incus version on every Incus server, the client output also shows the server version6.0.7 on the 6.0 LTS line, 6.1 to 7.0.1, or 7.1 to 7.4.xincus project list, incus config trust list, and incus remote list and incus cluster list for migration peers6.0.7 or later (6.0 line), 7.0.2 or later (6.1 to 7.0 line), or 7.5.0 or later (7.1 line)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources to write host files by planting symlinks in transferred volumes. Attackers can craft rsync or btrfs receive streams with a symlink such as rootfs pointing to the host root, writing files as root for full host compromise.
This page as .md · .json · in your agent: get_signal("CVE-2026-115377")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.