{"action":"Upgrade github.com/lxc/incus-os/incus-osd to 0.0.0-20260313012803-e3b35f230d23 or later.","affected":[{"introduced":"0"}],"component":"github.com/lxc/incus-os/incus-osd","cve_ids":["CVE-2026-32606"],"ecosystem":"Go","epss":0.00146,"exploited":false,"fixed_versions":["0.0.0-20260313012803-e3b35f230d23"],"ghsa_id":"GHSA-wj2j-qwcf-cfcc","id":"tcs_01M5KFQSA7X2QDC4V13KANBRJA","modified_at":"2026-03-26T21:11:07.925082Z","published_at":"2026-03-16T16:26:00Z","references":["https://osv.dev/vulnerability/GHSA-wj2j-qwcf-cfcc","https://github.com/lxc/incus-os/security/advisories/GHSA-wj2j-qwcf-cfcc","https://nvd.nist.gov/vuln/detail/CVE-2026-32606","https://github.com/lxc/incus-os/pull/954","https://github.com/lxc/incus-os/commit/e3b35f230d23443d27752eac27ebb2b22c957b75","https://discuss.linuxcontainers.org/t/potential-luks-encryption-bypass-through-filesystem-confusion/26348","https://github.com/lxc/incus-os","https://oddlama.org/blog/bypassing-disk-encryption-with-tpm2-unlock"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-wj2j-qwcf-cfcc","url":"https://osv.dev/vulnerability/GHSA-wj2j-qwcf-cfcc"}],"summary":"IncusOS has a LUKS encryption bypass due to insufficient TPM policy"}