CyberRota Analysis
AI-GeneratedPrior to version 7.2.0, Incus system container and virtual machine manager is vulnerable due to instance snapshots disregarding the `restricted.containers.lowlevel=block` setting, which enables arbitrary command execution on the server through low-level hooks like `raw.lxc` and `raw.qemu`. This critical vulnerability poses a significant risk to system integrity and confidentiality, making it imperative for users of affected versions to prioritize upgrading to version 7.2.0 or later to mitigate potential exploitation. Organizations utilizing Incus for container management should act swiftly to address this vulnerability to safeguard their environments.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the `restricted.containers.lowlevel=block` setting; allowing for arbitrary command execution on the Incus server by abusing lowlevel hooks such as `raw.lxc` and `raw.qemu`. Version 7.2.0 patches the issue.