CVE-2026-41647 — Incus: Nil-Pointer Dereference via S3 Bucket Import
Incus is a system container and virtual machine manager. Prior to version 7.0.0, a missing error handling could lead an authenticated Incus user to cause a daemon crash through …
Published: 2026-05-07 · CVSS: 6.5 · CVSS 3.1
Incus is a system container and virtual machine manager. Prior to version 7.0.0, a missing error handling could lead an authenticated Incus user to cause a daemon crash through the import of a truncated storage bucket backup file. This issue has been patched in version 7.0.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7