CVE-2026-48755

{
  "id": "CVE-2026-48755",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-21T15:16:41.077",
  "lastModified": "2026-11-06T01:17:49.773",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Incus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of user-provided backup compression algorithm leads to argument injection in the constructed command line. This leads to an arbitrary file write on the host, possibly leading to arbitrary command execution. Version 7.1.0 patches the issue."
    },
    {
      "lang": "es",
      "value": "Incus es un gestor de contenedores de sistema y máquinas virtuales. Antes de la versión 7.1.0, la validación inadecuada del algoritmo de compresión de copia de seguridad proporcionado por el usuario conduce a la inyección de argumentos en la línea de comandos construida. Esto conduce a una escritura de archivo arbitraria en el host, posiblemente conduciendo a la ejecución de comandos arbitraria. La versión 7.1.0 soluciona el problema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "lxc",
          "product": "incus",
          "versions": [
            {
              "version": "< 7.2.0",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "canonical",
          "product": "lxd",
          "versions": [
            {
              "version": ">= 4.0.0, < 4.0.11",
              "status": "affected"
            },
            {
              "version": ">= 5.0.0, < 5.0.7",
              "status": "affected"
            },
            {
              "version": ">= 5.1.0, < 5.21.5",
              "status": "affected"
            },
            {
              "version": ">= 6.0.0, < 6.9.0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "baseScore": 9.9,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.1,
        "impactScore": 6.0
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-21T21:00:19.912339Z",
          "id": "CVE-2026-48755",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/canonical/lxd/security/advisories/GHSA-fmc8-p6q7-75cc",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/lxc/incus/security/advisories/GHSA-v6mj-8pf4-hhw4",
      "source": "[email protected]"
    }
  ]
}