Back to CVE List

CVE-2026-48750

CRITICAL SEVERITY

CVSS Score & Metrics

Base Score
9.9 / 10

Vulnerability Description

Incus has an arbitrary file write on host via `exec-output` symlink in crafted image

Vulnerability Details

Published Date
Last Modified
Source
GitHub
Vendor
go
Product
github.com/lxc/incus/v7/cmd/incusd

External References

Discussion (0)

Add Comment

No comments yet. Be the first!