GO-2025-4115
NoneCVSS
—
EPSS
—
Published
Nov 17, 2025
CISA due date
—
The record
Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/lxc/incus | 0 | No fix |
| Go | github.com/lxc/incus/v6 | 0 | No fix |
| Go | github.com/lxc/incus/v6 | 6.1.0 | No fix |
| go | github.com/lxc/incus/v6 | 6.1.0 | No fix |
Related vulnerabilities
- CVE-2025-64507 Incus vulnerable to local privilege escalation through custom storage volumes Same vulnerability
- GO-2026-4359 Incus container environment configuration newline injection in github.com/lxc/incus Also affects github.com/lxc/incus
- GO-2026-4357 Incus container image templating arbitrary host file read and write in… Also affects github.com/lxc/incus
- CVE-2026-23954 Incus container image templating arbitrary host file read and write Also affects github.com/lxc/incus
- CVE-2026-23953 Incus container environment configuration newline injection Also affects github.com/lxc/incus