Fluid Attacks Database

Description

Incus has an abitrary file write through its systemd-creds options in github.com/lxc/incus Incus has an abitrary file write through its systemd-creds options in github.com/lxc/incus

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
go	github.com/lxc/incus/v6	>=0 <6.23.0	6.23.0
debian 14	incus	=6.0.4-2 \|\| =6.0.4-3 \|\| =6.0.5-1 \|\| =6.0.5-2 \|\| =6.0.5-3 \|\| =6.0.5-4 \|\| =6.0.5-5 \|\| =6.0.5-6 \|\| =6.0.5-7 \|\| =6.0.5-8 \|\| =6.0.6-1 \|\| >=0 <6.0.6-2	6.0.6-2
go	github.com/lxc/incus	-	-

Aliases

1. CVE-2026-339452. NVD-2026-339453. OSV-2026-339454. OSV-DEBIAN-2026-339455. OSV-GO-2026-48846. GHSA-q4q8-7f2j-9h9f7. GCVE-2026-339458. SECURITY-TRACKER-CVE-2026-339459. GHSA-q4q8-7f2j-9h9f

References

1. https://github.com/lxc/incus/security/advisories/GHSA-q4q8-7f2j-9h9f2. https://github.com/lxc/incus/commit/f74199f9983e2ce78f2b78b6d765c6635b229c82

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.