{"action":"Upgrade github.com/lxc/incus-os/incus-osd to 0.0.0-20260313012803-e3b35f230d23 or later.","affected":[{"introduced":"0"}],"component":"github.com/lxc/incus-os/incus-osd","cve_ids":["CVE-2026-32606"],"ecosystem":"Go","epss":0.00146,"exploited":false,"fixed_versions":["0.0.0-20260313012803-e3b35f230d23"],"ghsa_id":"GHSA-wj2j-qwcf-cfcc","id":"tcs_01M5KGFCH50TS72W8ZZAHDJ0PV","modified_at":"2026-03-26T21:02:57.078499Z","published_at":"2026-03-26T20:32:44Z","references":["https://osv.dev/vulnerability/GO-2026-4704","https://github.com/lxc/incus-os/security/advisories/GHSA-wj2j-qwcf-cfcc","https://nvd.nist.gov/vuln/detail/CVE-2026-32606","https://discuss.linuxcontainers.org/t/potential-luks-encryption-bypass-through-filesystem-confusion/26348","https://github.com/lxc/incus-os/commit/e3b35f230d23443d27752eac27ebb2b22c957b75","https://github.com/lxc/incus-os/pull/954","https://oddlama.org/blog/bypassing-disk-encryption-with-tpm2-unlock"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GO-2026-4704","url":"https://osv.dev/vulnerability/GO-2026-4704"},{"source":"nvd","source_id":"CVE-2026-32606","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32606"}],"summary":"IncusOS has a LUKS encryption bypass due to insufficient TPM policy in github.com/lxc/incus-os/incus-osd"}