CVE-2026-115373
Description
A flaw was found in Incus. A missing authorization check on the operations endpoint allows an authenticated attacker with restricted project access to view operations belonging to other projects. By querying the endpoint with a known operation identifier, the attacker can access sensitive information, including environment secrets, command lines, websocket credentials, and trust enrollment tokens.
Statement
This vulnerability is rated as Moderate impact because successful exploitation requires low-privileged network authentication and prior knowledge of a target operation identifier. While unauthorized disclosure of execution parameters and project credentials across tenancy boundaries is serious, the prerequisite of possessing a valid client certificate and discovering an unguessable UUID prevents widespread automated abuse. Furthermore, Incus is not packaged or distributed as part of Red Hat Enterprise Linux, resulting in no direct impact on standard Red Hat deployments.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
