CVE-2026-115378 Details

An arbitrary file write vulnerability has been identified in Incus versions prior to 6.0.7, 6.1.0 prior to 7.0.2, and 7.1.0 prior to 7.5.0. The vulnerability resides in the 'sftpRecursivePullFile' function, allowing a malicious 'incus-agent' to escape the target directory during a recursive file pull operation. Attackers with root access in a virtual machine can exploit this by returning duplicate directory entries, first as symlinks and then as files or directories. This manipulation enables the writing of attacker-controlled files, such as '/etc/shadow', to the host of the Incus operator.

Users can update to Incus version 7.5.0 or later, where this vulnerability has been patched. Alternatively, avoid using 'incus file pull -r' from untrusted virtual machines, or run it as an unprivileged user into a dedicated directory.