logo

Database

Authentication mechanism absence or evasion In github.com/lxc/incus/v6

Description

Incus has an OVN TLS Verification that Accepts Peer-Supplied Roots in github.com/lxc/incus

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2026-402432. NVD-2026-402433. OSV-GO-2026-53194. OSV-2026-402435. OSV-DEBIAN-2026-402436. OSV-ALPINE-2026-402437. GHSA-c839-4qxr-j4x38. GCVE-2026-402439. GHSA-c839-4qxr-j4x310. SECURITY-TRACKER-CVE-2026-4024311. SECURITY-CVE-2026-40243

References

1. https://github.com/lxc/incus/blob/v6.22.0/internal/server/network/ovn/ovn_icnb.go2. https://github.com/lxc/incus/blob/v6.22.0/internal/server/network/ovn/ovn_icsb.go3. https://github.com/lxc/incus/blob/v6.22.0/internal/server/network/ovn/ovn_nb.go4. https://github.com/lxc/incus/blob/v6.22.0/internal/server/network/ovn/ovn_sb.go5. https://github.com/lxc/incus/security/advisories/GHSA-c839-4qxr-j4x3

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.