Copyright © 2012 Red Hat, Inc. All rights reserved. Critical 2026-08-21T14:21:03 incus: Incus has a restricted project bypass leading to arbitrary command execution 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CWE-863

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the `restricted.containers.lowlevel=block` setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as `raw.lxc` and `raw.qemu`. Version 7.2.0 patches the issue.

A flaw was found in Incus, a container and virtual machine manager. Instance snapshots do not enforce container restriction settings, allowing a user to execute arbitrary commands on the server through lowlevel hooks.

Incus is not shipped in any Red Hat product. The community Fedora package is affected. No mitigation is needed as Incus is not shipped in any Red Hat product. https://www.cve.org/CVERecord?id=CVE-2026-48751 https://nvd.nist.gov/vuln/detail/CVE-2026-48751 https://github.com/lxc/incus/security/advisories/GHSA-48q5-w887-33wv