CyberRota Analysis
AI-GeneratedPrior to version 7.2.0, Incus, a system container and virtual machine manager, is vulnerable to exploitation through specially crafted images or instance backups, allowing attackers to read or create/write arbitrary files on the host system. This critical vulnerability could lead to arbitrary command execution, posing significant risks to system integrity and confidentiality. Organizations using affected versions of Incus should prioritize upgrading to version 7.2.0 to mitigate this severe threat.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance backup can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 patches the issue.