{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/incus-7.3.0---7.4.x/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:linuxcontainers:incus:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.5,"id":"CVE-2026-115372"},{"id":"CVE-2026-115374"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Incus (7.3.0 - 7.4.x)","Incus (7.0.0-7.0.1, 7.1.0-7.4.x)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","s3","incus"],"_cs_type":"advisory","_cs_vendors":["Linux Containers"],"content_html":"\u003cp\u003eIncus versions 7.3.0 through 7.4.x (prior to 7.5.0) contain a project restriction bypass. The vulnerability allows users within a restricted project to set the 'block.create_options' property during volume update, copy, or move operations. An attacker can leverage this to inject arbitrary arguments into the 'mkfs' command, which is executed with root privileges by the Incus daemon on the host.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a restricted project user to achieve command execution with root privileges on the underlying host system.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUpgrade Incus to version 7.5.0 or later immediately to remediate the vulnerability. If an upgrade is not immediately feasible, restrict the ability of untrusted users to perform volume update, copy, or move operations within projects where project restrictions are relied upon for security isolation.\u003c/p\u003e\n","date_modified":"2026-10-22T20:28:41Z","date_published":"2026-10-22T20:28:33Z","id":"https://feed.craftedsignal.io/briefs/2026-10-incus-restriction-bypass/","summary":"A project restriction bypass in Incus 7.3.0 through 7.4.x allows restricted users to inject malicious arguments into the mkfs command, leading to privilege escalation on the host.","title":"Incus: Project restriction bypass and privilege escalation (CVE-2026-115372)","url":"https://feed.craftedsignal.io/briefs/2026-10-incus-restriction-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Incus (7.3.0 - 7.4.x)","version":"https://jsonfeed.org/version/1.1"}