Vulnerabilidades en lxc

50 resultados
CVE-2026-23954HIGHIncus container image templating arbitrary host file read and writeEPSS 0.8%CVE-2026-48755CRITICALIncus has an argument injection in backup compression algorithm leading to AFW and ACEEPSS 0.7%CVE-2026-48753CRITICALIncus has an arbitrary file write via path traversal in S3 multipart uploadEPSS 0.7%CVE-2026-48752CRITICALIncus has arbitrary file read+write on host via templates/ symlink in malicious imageEPSS 0.7%CVE-2026-48769CRITICALIncus has an arbitrary file write on its client due to trusted image hashEPSS 0.7%CVE-2026-48750CRITICALIncus has an arbitrary file write on host via `exec-output` symlink in crafted imageEPSS 0.7%CVE-2026-48749CRITICALIncus has an arbitrary file read+write on host via rootfs/ symlink in malicious imageEPSS 0.7%CVE-2026-63125CRITICALIncus vulnerable to root RCE via image backup.yaml symlinkEPSS 0.7%CVE-2026-48751CRITICALIncus has a restricted project bypass leading to arbitrary command executionEPSS 0.6%CVE-2026-52727HIGHlxc-ci: Pacman keyring stored in archlinux image with a private keyEPSS 0.6%CVE-2026-62867CRITICALIncus has an argument injection in storage volume block.create_options that leads to arbitrary command executionEPSS 0.5%CVE-2026-23953HIGHIncus container environment configuration newline injectionEPSS 0.5%CVE-2026-33897CRITICALIncus vulnerable to arbitrary file read and write through pongo templatesEPSS 0.5%CVE-2026-63343CRITICALArbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as rootEPSS 0.5%CVE-2026-33945CRITICALAbitrary file write through systemd-creds optionEPSS 0.5%CVE-2026-62941CRITICALIncus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config mergeEPSS 0.4%CVE-2026-62940CRITICALIncus has a project restriction bypass via instance migration config overrideEPSS 0.4%CVE-2026-40251HIGHIncus out-of-bounds panic in snapshot metadata handling allows denial of serviceEPSS 0.4%CVE-2026-41684MEDIUMIncus: Nil Dereferences on Restore via Malformed YAMLEPSS 0.4%CVE-2026-115375CRITICALIncus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent VolumesEPSS 0.4%