CVE-2026-23954

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23954", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-01-19T14:49:06.312Z", "datePublished": "2026-01-22T21:45:55.696Z", "dateUpdated": "2026-01-26T21:02:48.738Z"}, "containers": {"cna": {"title": "Incus container image templating arbitrary host file read and write", "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "lang": "en", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/lxc/incus/security/advisories/GHSA-7f67-crqm-jgh7", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/lxc/incus/security/advisories/GHSA-7f67-crqm-jgh7"}, {"name": "https://github.com/lxc/incus/blob/HEAD/internal/server/instance/drivers/driver_lxc.go#L7215", "tags": ["x_refsource_MISC"], "url": "https://github.com/lxc/incus/blob/HEAD/internal/server/instance/drivers/driver_lxc.go#L7215"}, {"name": "https://github.com/lxc/incus/blob/HEAD/internal/server/instance/drivers/driver_lxc.go#L7294", "tags": ["x_refsource_MISC"], "url": "https://github.com/lxc/incus/blob/HEAD/internal/server/instance/drivers/driver_lxc.go#L7294"}, {"name": "https://github.com/user-attachments/files/24473599/template_arbitrary_write.sh", "tags": ["x_refsource_MISC"], "url": "https://github.com/user-attachments/files/24473599/template_arbitrary_write.sh"}, {"name": "https://github.com/user-attachments/files/24473601/templates_arbitrary_write.patch", "tags": ["x_refsource_MISC"], "url": "https://github.com/user-attachments/files/24473601/templates_arbitrary_write.patch"}], "affected": [{"vendor": "lxc", "product": "incus", "versions": [{"version": ">= 6.1.0, <= 6.20.0", "status": "affected"}, {"version": "<= 6.0.5", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-01-22T21:45:55.696Z"}, "descriptions": [{"lang": "en", "value": "Incus is a system container and virtual machine manager. Versions 6.21.0 and below allow a user with the ability to launch a container with a custom image (e.g a member of the \u2018incus\u2019 group) to use directory traversal or symbolic links in the templating functionality to achieve host arbitrary file read, and host arbitrary file write. This ultimately results in arbitrary command execution on the host. When using an image with a metadata.yaml containing templates, both the source and target paths are not checked for symbolic links or directory traversal. This can also be exploited in IncusOS. A fix is planned for versions 6.0.6 and 6.21.0, but they have not been released at the time of publication."}], "source": {"advisory": "GHSA-7f67-crqm-jgh7", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-26T21:02:38.599423Z", "id": "CVE-2026-23954", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-26T21:02:48.738Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-23954", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-26T21:02:38.599423Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-26T21:02:44.533Z"}}], "cna": {"title": "Incus container image templating arbitrary host file read and write", "source": {"advisory": "GHSA-7f67-crqm-jgh7", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "lxc", "product": "incus", "versions": [{"status": "affected", "version": ">= 6.1.0, <= 6.20.0"}, {"status": "affected", "version": "<= 6.0.5"}]}], "references": [{"url": "https://github.com/lxc/incus/security/advisories/GHSA-7f67-crqm-jgh7", "name": "https://github.com/lxc/incus/security/advisories/GHSA-7f67-crqm-jgh7", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/lxc/incus/blob/HEAD/internal/server/instance/drivers/driver_lxc.go#L7215", "name": "https://github.com/lxc/incus/blob/HEAD/internal/server/instance/drivers/driver_lxc.go#L7215", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/lxc/incus/blob/HEAD/internal/server/instance/drivers/driver_lxc.go#L7294", "name": "https://github.com/lxc/incus/blob/HEAD/internal/server/instance/drivers/driver_lxc.go#L7294", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/user-attachments/files/24473599/template_arbitrary_write.sh", "name": "https://github.com/user-attachments/files/24473599/template_arbitrary_write.sh", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/user-attachments/files/24473601/templates_arbitrary_write.patch", "name": "https://github.com/user-attachments/files/24473601/templates_arbitrary_write.patch", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Incus is a system container and virtual machine manager. Versions 6.21.0 and below allow a user with the ability to launch a container with a custom image (e.g a member of the \u2018incus\u2019 group) to use directory traversal or symbolic links in the templating functionality to achieve host arbitrary file read, and host arbitrary file write. This ultimately results in arbitrary command execution on the host. When using an image with a metadata.yaml containing templates, both the source and target paths are not checked for symbolic links or directory traversal. This can also be exploited in IncusOS. A fix is planned for versions 6.0.6 and 6.21.0, but they have not been released at the time of publication."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-01-22T21:45:55.696Z"}}}, "cveMetadata": {"cveId": "CVE-2026-23954", "state": "PUBLISHED", "dateUpdated": "2026-01-26T21:02:48.738Z", "dateReserved": "2026-01-19T14:49:06.312Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-01-22T21:45:55.696Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "incus", "vendor": "lxc", "versions": [{"status": "affected", "version": ">= 6.1.0, <= 6.20.0"}, {"status": "affected", "version": "<= 6.0.5"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:linuxcontainers:incus:*:*:*:*:*:*:*:*", "matchCriteriaId": "0DF87DBE-86FF-4E74-8086-AE3360A94C71", "versionEndIncluding": "6.0.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:linuxcontainers:incus:*:*:*:*:*:*:*:*", "matchCriteriaId": "47AA575C-385C-4C34-8CC0-F370EC4ED7B4", "versionEndExcluding": "6.21.0", "versionStartIncluding": "6.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Incus is a system container and virtual machine manager. Versions 6.21.0 and below allow a user with the ability to launch a container with a custom image (e.g a member of the \u2018incus\u2019 group) to use directory traversal or symbolic links in the templating functionality to achieve host arbitrary file read, and host arbitrary file write. This ultimately results in arbitrary command execution on the host. When using an image with a metadata.yaml containing templates, both the source and target paths are not checked for symbolic links or directory traversal. This can also be exploited in IncusOS. A fix is planned for versions 6.0.6 and 6.21.0, but they have not been released at the time of publication."}, {"lang": "es", "value": "Incus es un gestor de contenedores de sistema y m\u00e1quinas virtuales. Las versiones 6.21.0 e inferiores permiten a un usuario con la capacidad de lanzar un contenedor con una imagen personalizada (por ejemplo, un miembro del grupo 'incus') utilizar salto de directorio o enlaces simb\u00f3licos en la funcionalidad de plantillas para lograr la lectura arbitraria de archivos del host y la escritura arbitraria de archivos del host. Esto finalmente resulta en la ejecuci\u00f3n arbitraria de comandos en el host. Al usar una imagen con un metadata.yaml que contiene plantillas, ni las rutas de origen ni las de destino se verifican en busca de enlaces simb\u00f3licos o salto de directorio. Esto tambi\u00e9n puede ser explotado en IncusOS. Se planea una correcci\u00f3n para las versiones 6.0.6 y 6.21.0, pero no han sido lanzadas en el momento de la publicaci\u00f3n."}], "id": "CVE-2026-23954", "lastModified": "2026-06-17T10:22:20.753", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 5.8, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-23954", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-26T21:02:38.599423Z", "version": "2.0.3"}}]}, "published": "2026-01-22T22:16:20.833", "references": [{"source": "security-advisories@github.com", "tags": ["Product"], "url": "https://github.com/lxc/incus/blob/HEAD/internal/server/instance/drivers/driver_lxc.go#L7215"}, {"source": "security-advisories@github.com", "tags": ["Product"], "url": "https://github.com/lxc/incus/blob/HEAD/internal/server/instance/drivers/driver_lxc.go#L7294"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/lxc/incus/security/advisories/GHSA-7f67-crqm-jgh7"}, {"source": "security-advisories@github.com", "tags": ["Exploit"], "url": "https://github.com/user-attachments/files/24473599/template_arbitrary_write.sh"}, {"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/user-attachments/files/24473601/templates_arbitrary_write.patch"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T15:23:36.949988+00:00", "value": {"mitigation_remediation": ["Upgrade Incus to a released version that includes the fix (6.0.6 or 6.21.0) as soon as it becomes available.", "Apply the community\u2011provided patch file (templates_arbitrary_write.patch) to correct the path validation in the templating logic if an upgrade is not immediately possible.", "Restrict incus group membership or disable the templating feature for untrusted users to remove the local privilege needed to exploit the flaw."], "summary": {"action": "Apply patch", "impact": "Arbitrary host code execution via image templating"}, "threat_synthesis": {"affected_systems": "The vulnerability affects the LinuxContainers Incus product, versions 6.21.0 and earlier, including IncusOS deployments. The flaw is present when an image contains a metadata.yaml file with template definitions that are not validated for traversal or symlink usage.", "description_and_impact": "Incus, a system container and VM manager, allows users who can launch containers with custom images to use directory traversal or symbolic links in the templating mechanism, resulting in arbitrary file read and write on the host. This flaw, which is a case of CWE\u201122 Path Traversal, can be leveraged to execute commands on the host, compromising confidentiality, integrity, and availability at the system level.", "risk_and_exploitability": "The assigned CVSS score of 8.7 indicates a high severity. The EPSS score is below 1%, suggesting low current exploitation probability, and the vulnerability is not listed in CISA\u2019s KEV catalog. Exploitation requires local access to start a container and membership in the incus group, and involves crafting a template image that points to arbitrary host paths. Attackers who can meet these conditions can read sensitive files or overwrite critical configuration, leading to arbitrary command execution on the host."}}}}, "created": "2026-01-23T10:27:11.214894+00:00", "updated": "2026-04-18T15:30:03.956764+00:00", "vendors": ["lxc", "lxc$PRODUCT$incus"]}