Skip to content

PatchFirst · Latest vulnerabilities

incus vulnerabilities · Page 4

Vulnerabilities published for incus in the last 30 days: 8. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 62

CVE-2025-54286
High · CVSS 7.5EPSS 0.13%Fix available
CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI
Cross-Site Request Forgery (CSRF) in LXD-UI in Canonical LXD versions >= 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTML form submissions exploiting client certificate authentication.
incus Operating systems
- Update to 6.0.4-2+deb13u1
Published October 2, 2025Updated February 26, 2026
Source advisory 1 ↗Source advisory 2 ↗
CVE-2024-6156
Low · CVSS 3.8EPSS 0.16%Fix available
CVE-2024-6156
Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's certificate was present in the trust store.
incus Operating systems
- Update to 6.0.3-1
Published December 5, 2024Updated March 18, 2025
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →