Security Advisory

CVE-2026-48751

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-21 14:21:03

Last updated 2026-08-21 15:15:09

Assigner GitHub_M

CVSS score 9.9

State PUBLISHED

Description

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the `restricted.containers.lowlevel=block` setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as `raw.lxc` and `raw.qemu`. Version 7.2.0 patches the issue.

← Browse all CVEs View on cve.org ↗