CVE-2026-115373 | lxc Incus up to 6.0.6/7.0.1/7.4.x Operations uuid improper authorization

October 22, 2026 Yanac

A vulnerability was found in lxc Incus up to 6.0.6/7.0.1/7.4.x. It has been declared as problematic. The impacted element is an unknown function of the component Operations. Executing a manipulation of the argument uuid can lead to improper authorization.

This vulnerability is registered as CVE-2026-115373. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More