Debian/incus: critical 9.9
Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories
Action: Upgrade incus to 7.0.1-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.1-5 | - |
Fixed versions
| 7.0.1-5 |
Sources
- osv: DEBIAN-CVE-2026-85526#Debian:14/incus
- https://security-tracker.debian.org/tracker/CVE-2026-85526
published · modified · JSON