logo

Database

Authentication mechanism absence or evasion In github.com/lxc/incus

Description

Incus creates nftables rules that partially bypass security options in github.com/lxc/incus

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2025-528902. NVD-2025-528903. OSV-GO-2025-37824. OSV-2025-528905. OSV-ALPINE-2025-528906. GHSA-p7fw-vjjm-2rwp7. GCVE-2025-528908. GHSA-p7fw-vjjm-2rwp9. SECURITY-CVE-2025-52890

References

1. https://github.com/lxc/incus/commit/254dfd2483ab8de39b47c2258b7f1cf0759231c82. https://github.com/lxc/incus/security/advisories/GHSA-p7fw-vjjm-2rwp

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.