CVE-2026-115372
Description
A flaw was found in Incus. This vulnerability allows an authenticated attacker with restricted project permissions to achieve privilege escalation to administrative (root) level on the host system. By specifying custom creation options during volume update, copy, or move operations, a user can bypass project-level restrictions. When the volume is subsequently copied or moved onto a formatting storage pool, the manipulated options inject arbitrary arguments into the filesystem creation utility (mkfs), executing commands with root privileges.
Statement
This vulnerability is rated as an Important severity because authenticated users with restricted project privileges can bypass isolation controls to execute unintended command-line options within administrative utilities running as root on the host. Incus is not included or supported in Red Hat Enterprise Linux and is only packaged through Fedora community repositories. As a result, standard Red Hat enterprise environments remain unaffected.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
