logo

Database

Lack of data validation - Path Traversal In github.com/lxc/incus

Description

Incus has an abitrary file write through its systemd-creds options in github.com/lxc/incus

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2026-339452. NVD-2026-339453. OSV-GO-2026-48844. OSV-2026-339455. OSV-DEBIAN-2026-339456. GHSA-q4q8-7f2j-9h9f7. GCVE-2026-339458. GHSA-q4q8-7f2j-9h9f9. SECURITY-TRACKER-CVE-2026-33945

References

1. https://github.com/lxc/incus/commit/f74199f9983e2ce78f2b78b6d765c6635b229c822. https://github.com/lxc/incus/security/advisories/GHSA-q4q8-7f2j-9h9f

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.