CVE-2026-48755
Description
A flaw was found in Incus, a container and virtual machine manager. Improper validation of backup compression settings allows argument injection, leading to arbitrary file write on the host and potential command execution.
Statement
Incus is not shipped in any Red Hat product. The community Fedora package is affected.
Mitigation
No mitigation is needed as Incus is not shipped in any Red Hat product.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Availability,Other
Technical Impact: Execute Unauthorized Code or Commands; Alter Execution Logic; Read Application Data; Modify Application Data
An attacker could include arguments that allow unintended commands or code to be executed, allow sensitive data to be read or modified or could cause other unintended behavior.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
