CVE-2026-41685 - Vulnerability Analysis

Overview

Incus prior to 7.0.0 contains a denial of service vulnerability caused by large data uploads by authenticated users exhausting disk space, letting attackers potentially take down the host system, exploit requires authenticated user.

Severity & Score

Impact

Authenticated users can exhaust disk space causing denial of service and host system downtime.

Mitigation

Update to version 7.0.0 or later.

References

• https://github.com/lxc/incus/releases/tag/v7.0.0
• https://github.com/lxc/incus/security/advisories/GHSA-98vh-x9cx-9cfp

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner