CVE-2026-115376 | LXC Incus up to 7.0.1/7.4.x Custom Volumes Endpoint source.type authorization

October 22, 2026 Yanac

A vulnerability described as problematic has been identified in LXC Incus up to 7.0.1/7.4.x. This affects an unknown part of the component Custom Volumes Endpoint. Executing a manipulation of the argument source.type can lead to authorization bypass.

This vulnerability is handled as CVE-2026-115376. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More