CVE Tools
Track your stack

Lxc

35 CVEs tracked since 2026. Since Mar 2026, none of them reached CISA KEV.

Lxc CVEs per month

Mar 2026 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Lxc CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0370
2026-046 or fewer
2026-05100
2026-067 or fewer
2026-077 or fewer
2026-08180
2026-099 or fewer
2026-1011 or fewer
2026-113 or fewer

Products

The products that kept showing up in Lxc's monthly top three, with their CVEs summed over those months.

  1. Incus333 months
  2. Incus-os11 month
  3. Lxc11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Lxc.

  1. CVE-2026-100395LXC: lxc-copy host-context hostname update follows symlink—
  2. CVE-2026-115378Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull5.8
  3. CVE-2026-115377Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream9.9
  4. CVE-2026-115376Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 Project Restriction Bypass via Custom Volume Copy7.7
  5. CVE-2026-115375Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Path Traversal via Instance Backup Dependent Volumes9.9
  6. CVE-2026-115373Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Authorization Bypass via GET /1.0/operations/{uuid}6.3
  7. CVE-2026-115374Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 Unsigned Header Bypass in Presigned S3 Upload URLs7.1
  8. CVE-2026-115372Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options8.5
  9. CVE-2026-115370Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 Restricted Project Bypass via Clustered Migration Refresh4.3
  10. CVE-2026-115371LXC Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 Bucket Credential Disclosure via Storage Bucket Keys Endpoints7.1
  11. CVE-2026-52727lxc-ci: Pacman keyring stored in archlinux image with a private key7.2
  12. CVE-2026-63343Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root9.9
  13. CVE-2026-63125Incus vulnerable to root RCE via image backup.yaml symlink9.9
  14. CVE-2026-62941Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge9.9
  15. CVE-2026-62940Incus has a project restriction bypass via instance migration config override9.9

The record

Peak rank
#82 in Aug 2026
Busiest month shown
Aug 2026, 18 CVEs
Months with a KEV entry
0 since Mar 2026
Monthly snapshots
3 since 2026
Lxc's full record, month by month