CVE-2026-115371
Description
A flaw was found in Incus. An improper authorization vulnerability allows an authenticated attacker using restricted Transport Layer Security (TLS) client certificates to retrieve storage bucket credentials. By querying the bucket keys endpoints, the attacker can obtain Simple Storage Service (S3) access and secret keys in the default project, potentially allowing unauthorized reading, modification, or deletion of stored data.
Statement
This vulnerability is rated as Important because authenticated clients with restricted privileges can bypass authorization checks to access sensitive S3 credentials, directly threatening the confidentiality and integrity of stored bucket data. Incus is not distributed or supported in Red Hat Enterprise Linux or other Red Hat container virtualization offerings. Consequently, supported Red Hat products and environments are not affected by this flaw.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Availability,Access Control
Technical Impact: Read Application Data; Modify Application Data; Execute Unauthorized Code or Commands; Gain Privileges or Assume Identity
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
