Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-62940

Опубликовано: 21 авг. 2026
Источник: redhat
CVSS3: 9.9
EPSS Низкий

Описание

Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides (including security-critical keys like security.privileged and raw.lxc) are applied without any project restriction enforcement, allowing a restricted project user to escalate to a privileged container and escape to the host. Version 7.3.0 patches the issue.

A flaw was found in Incus, a container and virtual machine manager. During instance migration, security-critical configuration overrides bypass project restrictions, allowing a restricted user to escalate privileges and escape the container to the host.

Отчет

Incus is not shipped in any Red Hat product. The community Fedora package is affected.

Меры по смягчению последствий

No mitigation is needed as Incus is not shipped in any Red Hat product.

Дополнительная информация

Статус:

Critical
Дефект:
CWE-863
https://bugzilla.redhat.com/show_bug.cgi?id=2521016incus: Incus has a project restriction bypass via instance migration config override

EPSS

Процентиль: 14%
0.00232
Низкий

9.9 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.9
ubuntu
14 дней назад

Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides (including security-critical keys like `security.privileged` and `raw.lxc`) are applied without any project restriction enforcement, allowing a restricted project user to escalate to a privileged container and escape to the host. Version 7.3.0 patches the issue.

CVSS3: 9.9
nvd
14 дней назад

Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another cluster member, user-supplied configuration overrides (including security-critical keys like `security.privileged` and `raw.lxc`) are applied without any project restriction enforcement, allowing a restricted project user to escalate to a privileged container and escape to the host. Version 7.3.0 patches the issue.

CVSS3: 9.9
debian
14 дней назад

Incus is a system container and virtual machine manager. Prior to vers ...

EPSS

Процентиль: 14%
0.00232
Низкий

9.9 Critical

CVSS3

Уязвимость CVE-2026-62940