CVE-2026-115372

HIGH 8.5

Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options

CVSS Score

8.5

EPSS Score

0.0%

EPSS Percentile

0th

Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set block.create_options through volume update, copy, and move operations. Attackers can set the option on a custom volume and trigger a copy or move onto a formatting pool to inject arguments into mkfs executed as root.

CWE	CWE-88
Vendor	lxc
Product	incus
Published	Oct 22, 2026

Stay Ahead of the Next One

Get instant alerts for lxc incus

Be the first to know when new high vulnerabilities affecting lxc incus are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

lxc / incus

7.3.0 < 7.5.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/lxc/incus/security/advisories/GHSA-4cph-ccqv-hm3c vulncheck.com: https://www.vulncheck.com/advisories/incus-7.3.0-before-7.5.0-project-restriction-bypass-via-block-create-options

Credits

🔍 manus-pi stgraber 🔍 manus-use