CVE-2026-62867: CVE-2026-62867: güvenlik açığı

Açıklama (NVD)

Incus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation of user-provided `block.create_options` in storage volume configuration leads to argument injection in the constructed filesystem creation command line. This allows a project-scoped user to inject arbitrary arguments into the binary executed as root. Version 7.3.0 patches the issue.

Özet bilgiler

CVSS v3.1

9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

%0,52 (yüzdelik 44)

CWE

CWE-88

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• CWE-88