CVE Tools
Track your stack

Lxc

35 CVEs tracked since 2026. Since Mar 2026, none of them reached CISA KEV.

Lxc CVEs per month

Mar 2026 to Aug 2026. Point at a month, or focus the strip and use the arrow keys.
Lxc CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0370
2026-04null or fewer
2026-05100
2026-06null or fewer
2026-07null or fewer
2026-08180

Products

The products that kept showing up in Lxc's monthly top three, with their CVEs summed over those months.

  1. Incus333 months
  2. Incus-os11 month
  3. Lxc11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Lxc.

  1. CVE-2026-52727lxc-ci: Pacman keyring stored in archlinux image with a private key7.2
  2. CVE-2026-63343Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root9.9
  3. CVE-2026-63125Incus vulnerable to root RCE via image backup.yaml symlink9.9
  4. CVE-2026-62941Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge9.9
  5. CVE-2026-62940Incus has a project restriction bypass via instance migration config override9.9
  6. CVE-2026-62867Incus has an argument injection in storage volume block.create_options that leads to arbitrary command execution9.9
  7. CVE-2026-62313Incus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`4.3
  8. CVE-2026-55622Incus has a project restriction bypass in instance copy across projects7.7
  9. CVE-2026-55621Incus has a project restriction bypass for custom volume copy across projects7.7
  10. CVE-2026-48769Incus has an arbitrary file write on its client due to trusted image hash9.9
  11. CVE-2026-48755Incus has an argument injection in backup compression algorithm leading to AFW and ACE9.9
  12. CVE-2026-48754Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}—
  13. CVE-2026-48753Incus has an arbitrary file write via path traversal in S3 multipart upload9.9
  14. CVE-2026-48752Incus has arbitrary file read+write on host via templates/ symlink in malicious image9.9
  15. CVE-2026-48751Incus has a restricted project bypass leading to arbitrary command execution9.9

The record

Peak rank
#82 in Aug 2026
Busiest month shown
Aug 2026, 18 CVEs
Months with a KEV entry
0 since Mar 2026
Monthly snapshots
3 since 2026
Lxc's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store