Incus (6.0.3-6.0.6, 6.6.0-7.0.1, 7.1.0-7.4.x)

Incus versions 7.0.0 through 7.0.1 and 7.1.0 through 7.4.0 contain a path traversal vulnerability in instance backup processing that allows authenticated attackers to write files to the host filesystem, resulting in full host compromise.