CVE-2026-115378 | lxc Incus up to 6.0.6/7.0.1/7.4.x SFTP Recursive Pull sftpRecursivePullFile code injection

October 22, 2026 Yanac

A vulnerability marked as problematic has been reported in lxc Incus up to 6.0.6/7.0.1/7.4.x. Affected by this issue is the function sftpRecursivePullFile of the component SFTP Recursive Pull. Performing a manipulation results in code injection.

This vulnerability is known as CVE-2026-115378. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More