{"id":"CVE-2026-115375","published":"2026-10-22T19:17:44.133","lastModified":"2026-10-23T17:06:36.030","description":"Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to create instances to write files on the host. The flaw stems from unvalidated dependent custom volume names in instance backup index.yaml files. Attackers can import a crafted instance backup with ../ sequences in dependent volume names to create root-owned directories with controlled content, leading to full host compromise.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://github.com/lxc/incus/security/advisories/GHSA-hpjh-q53p-f27r","tags":[]},{"url":"https://www.vulncheck.com/advisories/incus-7.0.0-before-7.0.2-and-7.1.0-before-7.5.0-path-traversal-via-instance-backup-dependent-volumes","tags":[]}],"exploitRefs":[{"url":"https://github.com/lxc/incus/security/advisories/GHSA-hpjh-q53p-f27r","tags":[]}],"hasPoc":true,"ai":{"summary":"A path traversal flaw in Incus instance backup handling allows authenticated users to escape container boundaries by embedding ../ sequences in dependent volume names within crafted index.yaml files, enabling arbitrary file creation on the host as root.","exploitability":"Requires low-privilege access to create instances and upload backups; no user interaction or complex conditions needed.","blast_radius":"Successful exploitation grants full host compromise, including root access and persistence via system file modification.","remediation":"Upgrade to Incus 7.0.2 or 7.5.0 or later, as these versions patch the unvalidated dependent custom volume name handling.","detection":"Monitor for creation of unexpected root-owned directories or files outside standard instance storage paths (e.g., /var/lib/incus/volumes/*/../) in host filesystem logs; also watch for backup import events containing nested directory structures with '..' components in volume names.","tags":["path-traversal","container-escape","privilege-escalation","file-write","incus"],"model":"garnet-coder","analyzedAt":"2026-10-24T08:50:55.642Z"}}