CVE-2026-115372 | lxc Incus up to 7.4.x Volume Operations block.create_options privileges management

October 22, 2026 Yanac

A vulnerability was found in lxc Incus up to 7.4.x. It has been rated as very critical. This affects an unknown function of the component Volume Operations. The manipulation of the argument block.create_options leads to improper privilege management.

This vulnerability is documented as CVE-2026-115372. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More