Skip to content
Threat Feed
Subscribe

Product

Incusd (< 7.2.0)

1 brief RSS
critical advisory

Critical Incus Vulnerability (CVE-2026-48752) Allows Host Arbitrary File Read/Write Leading to RCE

A critical vulnerability, CVE-2026-48752, in Incus versions prior to 7.2.0 allows an unauthenticated attacker to achieve arbitrary file read and write on the host system via specially crafted container images or instance backups containing unsanitized symlinks, potentially leading to arbitrary command execution as root.

incusd vulnerability rce symlink linux incus container
1r 6t