Skip to content
OpenAdvisories

Package · Go

github.com/lxc/incus/v6/cmd/incus

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-33898

    Local Incus UI web server vulnerable to nuthentication bypass

    Incus is a system container and virtual machine manager. Prior to version 6.23.0, the web server spawned by `incus webui` incorrectly validates the authentication token such that an invalid value will be accepted. `incus webui` runs a local web server on a ra…

    lxc incus incus incus Debian Ubuntu Go