🚨 CRITICAL - Incus crafted image rootfs symlink escape via stopped-container file API (CVE-2026-48749) Incus (http://github.com/lxc/incus/v7/cmd/incusd) mishandles validation and extraction of container images, allowing a crafted image to embed a duplicate top-level rootfs symlink that subverts expected path boundaries. The root cause is improper input validation and unsafe archive/symlink handling during image unpacking, resulting in path confusion between container rootfs and the host filesystem. An attacker can exploit this by importing or causing an admin/automation to import a malicious container image, then leveraging the stopped-container file API so file operations resolve against the host rather than the container. Successful exploitation enables arbitrary file read/write on the host with root privileges and can be chained into full host command execution. 👉 Affected: http://github.com/lxc/incus/v7/cmd/incusd (versions not specified) | Upgrade to No fix yet — treat as suspicious
Post summary
Incus container platform is vulnerable to a rootfs symlink escape that allows arbitrary host file read/write and root‑level command execution via the stopped‑container file API. No patch exists and there is no evidence of active exploitation or a public PoC.