PT-2026-28560 · Incus+1 · Incus+1

Grmpyninja · Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-33897

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Incus versions prior to 6.23.0

Description Incus, a system container and virtual machine manager, allows instance template files to be used to perform arbitrary read and write operations as root on the host server. The software utilizes pongo2 templates within instances, intended for templating files inside the instance. The pongo2 chroot isolation mechanism, designed to restrict file access to the instance's filesystem, is bypassed, granting access to the entire system's filesystem with root privileges. This issue impacts system security and could lead to data exposure or system manipulation.

Recommendations Update Incus to version 6.23.0 or later.

Exploit

Fix

Weakness Enumeration

CWE-1336

Related Identifiers

BDU:2026-07327

CVE-2026-33897

GHSA-83XR-5XXR-MH92

GO-2026-4881

OPENSUSE-SU-2026:10450-1

Affected Products

Incus

Red Os

References · 32

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33897.json · Exploit
• https://github.com/lxc/incus/security/advisories/GHSA-83xr-5xxr-mh92 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-33897 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2026-4881 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-33897 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-83xr-5xxr-mh92 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33897 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-33897 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10450-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-33897 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-33897 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-33897 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07327 · Security Note
• https://github.com/lxc/incus/commit/487edf5984fad89b0f762c03a7e211fdd38396fb · Note
• https://github.com/lxc/incus · Note