All vulnerabilities

Servers and applications

GHSA-9c46-v3hw-v6m8

Rebuilding a never-started container makes it boot without a user namespace, running as privileged

Severity: High 8.8
Published: 29 Oct 2026
Last changed: 29 Oct 2026
Added to UpHeron: 1 Nov 2026
Fixed in: 7.6.0
Sources: Project advisories (GitHub)

Affected software

Software	Affected versions
IncusServers and applications · `github:lxc/incus`	Every version before 7.6.0

References

GitHub Advisory Database https://github.com/advisories/GHSA-9c46-v3hw-v6m8
github.com https://github.com/lxc/incus/security/advisories/GHSA-9c46-v3hw-v6m8