Summary
generated automatically from NVD dataIncus versions before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 have an arbitrary file write flaw (CWE-59, symlink following) in volume migration. A malicious migration source can craft rsync or btrfs receive streams that plant a symlink, such as rootfs pointing to the host root, causing files to be written on the host as root. This can lead to full host compromise, and the flaw is rated CRITICAL with a CVSS v3.1 score of 9.9.
NVD description
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources to write host files by planting symlinks in transferred volumes. Attackers can craft rsync or btrfs receive streams with a symlink such as rootfs pointing to the host root, writing files as root for full host compromise.
In-depth analysis on cveo.tech
We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.
CVSS v3.1 Score
Information
- Published
- 22 oct. 2026
- Updated
- 22 oct. 2026
- Status
- Received
- Source
- disclosure@vulncheck.com
Weaknesses (CWE)
Similar CVEs
Other vulnerabilities of type CWE-59
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.