CVE-2026-47753 | LXC Incus up to 7.0.x Backup backend.go (*backend).CreateInstanceFromBackup null pointer dereference

August 21, 2026 Yanac

A vulnerability, which was classified as critical, was found in LXC Incus up to 7.0.x. This affects the function (*backend).CreateInstanceFromBackup of the file internal/server/storage/backend.go of the component Backup Handler. The manipulation results in null pointer dereference.

This vulnerability is identified as CVE-2026-47753. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More