CVE-2026-63343 | LXC Incus up to 7.2.x Instance Metadata API metadata.yaml link following

A vulnerability was found in LXC Incus up to 7.2.x. It has been classified as very critical. This vulnerability affects unknown code of the file metadata.yaml of the component Instance Metadata API. The manipulation leads to link following.

This vulnerability is listed as CVE-2026-63343. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More