CVE-2026-48750
Description
A flaw was found in Incus, a container and virtual machine manager. A crafted container image can cause the host to write files to arbitrary locations via a symlink, potentially leading to command execution as root on the host.
Statement
Incus is not shipped in any Red Hat product. The community Fedora package is affected.
Mitigation
No mitigation is needed as Incus is not shipped in any Red Hat product.
Understanding the Weakness (CWE)
Confidentiality,Integrity
Technical Impact: Read Files or Directories; Modify Files or Directories
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
