CVE-2026-63125 | LXC Incus up to 7.2.x Backup File backup.yaml symlink

August 21, 2026 Yanac

A vulnerability classified as very critical was found in LXC Incus up to 7.2.x. This impacts an unknown function of the file backup.yaml of the component Backup File Handler. The manipulation results in symlink following.

This vulnerability was named CVE-2026-63125. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More