CVE-2026-115375 | LXC Incus up to 7.0.1/7.4.x Instance Backup index.yaml path traversal

October 22, 2026 Yanac

A vulnerability was found in LXC Incus up to 7.0.1/7.4.x and classified as very critical. This affects an unknown function of the file index.yaml of the component Instance Backup. Executing a manipulation can lead to path traversal.

This vulnerability is tracked as CVE-2026-115375. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More