Live › vulnerability › CVE-2026-115378
Go to dashboardIncus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 let a malicious incus-agent inside a virtual machine escape the target directory during recursive file pulls. An attacker with root in a VM can write attacker-controlled files such as /etc/shadow on the operator's host.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Operators who run incus file pull -r against virtual machines on an affected Incus release are exposed, since the flaw sits in the host-side recursive pull handling of data returned by incus-agent. Hosts running only containers or non-recursive pulls are less likely to be exposed, but the sources do not confirm this. Operators on patched releases can skip it.
No product ranges from the sources yet.
incus version on the operator host and compare against the fixed releasesincus list --format csv -c nt (unknown whether this narrows exposure further)6.0.7, 7.0.2 or 7.5.0, matching the release line in useEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in sftpRecursivePullFile that allows a malicious incus-agent to escape the target directory during incus file pull -r. Attackers with root in a virtual machine can return duplicate entries reported first as symlinks then as files or directories, writing attacker-controlled files such as /etc/shadow on the operator's host.
This page as .md · .json · in your agent: get_signal("CVE-2026-115378")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.