GO-2026-5801Published
Incus has an arbitrary file write on host via `exec-output` symlink in crafted image
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-48750 · CVE overview and exploitation status
cve-program · CVE-2026-48750
- https://github.com/lxc/incus/security/advisories/GHSA-73hr-m85f-64v9
- https://github.com/canonical/lxd/security/advisories/GHSA-9j25-mm2h-2f76
euvd · EUVD-2026-63977
- https://github.com/lxc/incus/security/advisories/GHSA-73hr-m85f-64v9
- https://github.com/canonical/lxd/security/advisories/GHSA-9j25-mm2h-2f76
nvd · CVE-2026-48750
- https://github.com/canonical/lxd/security/advisories/GHSA-9j25-mm2h-2f76
- https://github.com/lxc/incus/security/advisories/GHSA-73hr-m85f-64v9
osv · GHSA-73hr-m85f-64v9
- https://github.com/canonical/lxd/security/advisories/GHSA-9j25-mm2h-2f76
- https://github.com/lxc/incus/security/advisories/GHSA-73hr-m85f-64v9
- https://nvd.nist.gov/vuln/detail/CVE-2026-48750
- https://github.com/lxc/incus
osv · GO-2026-5801
Related changes
Linked by CVE identifier- Incus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-output` parameter of the `/instances/$name/exec` endpoint stores the output of the command in the `exec-output` directory of the instance. If `exec… · Advisory content revised · 7 Nov 2026
- Incus has an arbitrary file write on host via `exec-output` symlink in crafted image · Affected-version evidence changed · 6 Nov 2026
- Incus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-output` parameter of the `/instances/$name/exec` endpoint stores the output of the command in the `exec-output` directory of the instance. If `exec… · Advisory content revised · 6 Nov 2026
- Incus has an arbitrary file write on host via `exec-output` symlink in crafted image · Advisory content revised · 5 Nov 2026
- Incus has an arbitrary file write on host via `exec-output` symlink in crafted image · Advisory content revised · 5 Nov 2026