Skip to content
OpenAdvisories

Package · Go

github.com/lxc/incus-os/incus-osd

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-32606 Public exploit

    IncusOS has a LUKS encryption bypass due to insufficient TPM policy

    IncusOS is an immutable OS image dedicated to running Incus. Prior to 202603142010, the default configuration of systemd-cryptenroll as used by IncusOS through mkosi allows for an attacker with physical access to the machine to access the encrypted data witho…