PT-2026-6518 · Go · Github.Com/Lxc/Incus+1

Published 2026-02-05 · Updated 2026-02-05

OSV

Incus container environment configuration newline injection in github.com/lxc/incus

Related Identifiers

GO-2026-4359

Affected Products

Github.Com/Lxc/Incus

Github.Com/Lxc/Incus/V6

References · 6

• https://osv.dev/vulnerability/GO-2026-4359 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23953 · Security Note
• https://github.com/lxc/incus/blob/HEAD/internal/server/instance/drivers/driver_lxc.go#L1081 · Note
• https://github.com/lxc/incus/security/advisories/GHSA-x6jc-phwx-hp32 · Note
• ❌ https://github.com/user-attachments/files/24473682/environment_newline_injection.sh · Note, Deleted
• ❌ https://github.com/user-attachments/files/24473685/environment_newline_injection.patch · Note, Deleted