CVE-2026-48752: Incus allows malicious images to read and write host files

Summary

Incus, a container management software, can be tricked into allowing malicious images to read and write files on the host system. This could potentially allow an attacker to execute malicious code on the host. To protect against this, ensure that you only import trusted images into Incus and consider implementing additional security measures to restrict file access.

Affected software