Debian/incus: high 7.1
Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an improper authorization vulnerability that allows restricted TLS clients to read storage bucket keys in the default proj
Action: Upgrade incus to 7.0.1-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.1-5 | - |
Fixed versions
| 7.0.1-5 |
Sources
- osv: DEBIAN-CVE-2026-115371#Debian:14/incus
- https://security-tracker.debian.org/tracker/CVE-2026-115371
published · modified · JSON