All vulnerabilities

Servers and applications

GHSA-5c64-j5m6-8433

Restricted clients can create and access resources in the default project

Severity: Critical 9.9
Published: 29 Oct 2026
Last changed: 29 Oct 2026
Added to UpHeron: 1 Nov 2026
Fixed in: 7.6.0
Sources: Project advisories (GitHub)

Affected software

Software	Affected versions
IncusServers and applications · `github:lxc/incus`	Every version before 7.6.0

References

GitHub Advisory Database https://github.com/advisories/GHSA-5c64-j5m6-8433
github.com https://github.com/lxc/incus/security/advisories/GHSA-5c64-j5m6-8433