Critical Path Traversal Vulnerability in Incus: CVE-2026-48753
A critical vulnerability (CVE-2026-48753) with a CVSS score of 9.9 affects Incus, a system container and virtual machine manager. The vulnerability allows for path traversal and creation of arbitrary files on the host, potentially leading to arbitrary command execution. The issue is fixed in version 7.1.0. Organizations using Incus prior to version 7.1.0 are advised to upgrade immediately.