Incus does not verify combined fingerprint when downloading images from simplestreams servers
Priority MEDIUM 59CWE-295Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Attack requirements
- Present
- Impact type
- Spoofing
- Confidentiality · integrity · availability
- Low · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-295.
Summary
Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint when downloading from simplestreams image servers opens the door to image cache poisoning and under very narrow circumstances exposes other tenants to running attacker controlled images rather than the expected one. Version 6.23.0 patches the issue.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00183 7th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed incus (lxc): 6.23.0github.com/lxc/incus/v6/client (Go): 6.23.0
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| lxc | incus | before 6.23.0 | 6.23.0 | Patch available | CNA |
| — | github.com/lxc/incus/v6/client (Go) | before 6.23.0 | 6.23.0 | Patch available | GHSA-p8mm-23gg-jc9r |
- incus Vendorlxc Affected before 6.23.0 Fixed in 6.23.0 Patch available CNA
- github.com/lxc/incus/v6/client (Go) Vendor— Affected before 6.23.0 Fixed in 6.23.0 Patch available GHSA-p8mm-23gg-jc9r
Remediation
- Fix · CNA incus (lxc) Fixed in 6.23.0
- Fix · GHSA-p8mm-23gg-jc9r github.com/lxc/incus/v6/client (Go) Fixed in 6.23.0 Advisory →
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2026-33542
- 2026-10-03 Alias added: GHSA-p8mm-23gg-jc9r
References
Other 6
- https://github.com/lxc/incus/commit/04e97418189f743411884afb81a3384e6218b8cd
- https://github.com/lxc/incus/commit/4a80447c52d6bc05d3322feeb5395f581e7a80e4
- https://github.com/lxc/incus/commit/72688b7d9400c8f3c17ad0f93a7c1aeb89627307
- https://github.com/lxc/incus/commit/ee26f72524ab60a4abcfd4e52667c52bb24364fc
- https://github.com/lxc/incus
- https://github.com/lxc/incus/releases/tag/v6.23.0
More lxc Incus vulnerabilities
- TI-2026-19296 Incus container image templating arbitrary host file read and write CVSS 3.1HIGH 8.7
- TI-2026-19295 Incus container environment configuration newline injection CVSS 3.1HIGH 8.7
- TI-2025-39899 Incus vulnerable to local privilege escalation through custom storage volumes CVSS 4.0HIGH 8.6
- TI-2026-29045 Incus out-of-bounds panic in snapshot metadata handling allows denial of service CVSS 4.0HIGH 7.1
- TI-2026-29009 Incus nil-pointer dereference in storage bucket import allows denial of service CVSS 4.0HIGH 7.1
- TI-2026-26122 Incus vulnerable to denial of source through crafted bucket backup file CVSS 3.1MEDIUM 6.5
Sources
- CVE-2026-33542 · CVE Program
- CVE-2026-33542 · NVD
- FIRST EPSS
- GHSA-p8mm-23gg-jc9r · GitHub Advisory Database · CC BY 4.0
- CVE-2026-33542 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences