CVE-2026-48753
Received Received - Intake

Path Traversal in Incus Container Manager

Publication date: 2026-08-21

Last updated on: 2026-08-21

Assigner: GitHub, Inc.

Description
Incus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload endpoint is vulnerable to path traversal and allows creation of arbitrary files on the host. This behavior could lead to arbitrary command execution. Version 7.1.0 fixes the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-21
Last Modified
2026-08-21
Generated
2026-08-21
AI Q&A
2026-08-21
EPSS Evaluated
N/A
NVD
CVE-2026-48753
EUVD
EUVD-2026-63980

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
incus incus to 7.1.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-73 The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-48753 is a critical vulnerability in Incus versions prior to 7.1.0. It allows arbitrary file write via path traversal in the S3 multipart upload feature. Attackers can exploit this by crafting malicious upload IDs to write files to arbitrary locations on the host system, potentially leading to arbitrary command execution.

Detection Guidance

Check Incus version with 'incus version' to confirm if it is below 7.1.0. Inspect S3 upload logs for unusual file paths or unexpected file creations in system directories.

Impact Analysis

This vulnerability could allow attackers to write arbitrary files to your system, including sensitive files like cron jobs. This may lead to arbitrary command execution, compromising confidentiality, integrity, and availability of your system. The attack is network-based and requires low complexity.

Mitigation Strategies

Upgrade Incus to version 7.1.0 or later immediately. Disable S3 multipart upload functionality if not required until the upgrade is completed.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-48753. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart