Vulnerabilities in lxc
51 resultsCVE-2026-48750CRITICALIncus has an arbitrary file write on host via `exec-output` symlink in crafted imageEPSS 0.8%CVE-2026-48769CRITICALIncus has an arbitrary file write on its client due to trusted image hashEPSS 0.8%CVE-2026-48749CRITICALIncus has an arbitrary file read+write on host via rootfs/ symlink in malicious imageEPSS 0.8%CVE-2026-48752CRITICALIncus has arbitrary file read+write on host via templates/ symlink in malicious imageEPSS 0.8%CVE-2026-48755CRITICALIncus has an argument injection in backup compression algorithm leading to AFW and ACEEPSS 0.8%CVE-2026-23954HIGHIncus container image templating arbitrary host file read and writeEPSS 0.8%CVE-2026-48753CRITICALIncus has an arbitrary file write via path traversal in S3 multipart uploadEPSS 0.7%CVE-2026-48751CRITICALIncus has a restricted project bypass leading to arbitrary command executionEPSS 0.7%CVE-2026-63125CRITICALIncus vulnerable to root RCE via image backup.yaml symlinkEPSS 0.7%CVE-2026-52727HIGHlxc-ci: Pacman keyring stored in archlinux image with a private keyEPSS 0.6%CVE-2026-62867CRITICALIncus has an argument injection in storage volume block.create_options that leads to arbitrary command executionEPSS 0.5%CVE-2026-23953HIGHIncus container environment configuration newline injectionEPSS 0.5%CVE-2026-33897CRITICALIncus vulnerable to arbitrary file read and write through pongo templatesEPSS 0.5%CVE-2026-63343CRITICALArbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as rootEPSS 0.5%CVE-2026-33945CRITICALAbitrary file write through systemd-creds optionEPSS 0.5%CVE-2026-55622HIGHIncus has a project restriction bypass in instance copy across projectsEPSS 0.5%CVE-2026-62941CRITICALIncus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config mergeEPSS 0.4%CVE-2026-62940CRITICALIncus has a project restriction bypass via instance migration config overrideEPSS 0.4%CVE-2026-55621HIGHIncus has a project restriction bypass for custom volume copy across projectsEPSS 0.4%CVE-2026-40251HIGHIncus out-of-bounds panic in snapshot metadata handling allows denial of serviceEPSS 0.4%