GO-2026-4359
NoneCVSS
—
EPSS
—
Published
Feb 5, 2026
CISA due date
—
The record
Incus container environment configuration newline injection in github.com/lxc/incus
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/lxc/incus | 0 | No fix |
| Go | github.com/lxc/incus/v6 | 0 | No fix |
| Go | github.com/lxc/incus/v6 | 6.1.0 | No fix |
| go | github.com/lxc/incus/v6 | 6.1.0 | No fix |
Related vulnerabilities
- CVE-2026-23953 Incus container environment configuration newline injection Same vulnerability
- GO-2026-4357 Incus container image templating arbitrary host file read and write in… Also affects github.com/lxc/incus
- CVE-2026-23954 Incus container image templating arbitrary host file read and write Also affects github.com/lxc/incus
- GO-2025-4115 Incus vulnerable to local privilege escalation through custom storage volumes in… Also affects github.com/lxc/incus
- CVE-2025-64507 Incus vulnerable to local privilege escalation through custom storage volumes Also affects github.com/lxc/incus