# CVE-2026-115372: Incus project restriction bypass via block.create_options

Source: https://junglewise.ai/threats/cve-2026-115372-incus-from-7-3-0-before-7-5-0-contains-a-project-restriction  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-22. Updated: 2026-10-22  
License: CC BY 4.0 with a link back

CVE-2026-115372 · Severity: high · CVSS 8.5 · Published 2026-10-22

Incus is a container and virtual machine management system used to build and run isolated workloads. A flaw in versions 7.3.0 through 7.4.x allows users confined to restricted projects to bypass security controls and inject arbitrary arguments into system commands executed as root, potentially leading to arbitrary code execution and complete system compromise.

Technologies: [LXC Incus](https://junglewise.ai/threats/technologies/lxc-incus). Vendors: [LXC](https://junglewise.ai/threats/vendors/lxc).

## Quick answers

**Is CVE-2026-115372 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-115372 being exploited in the wild.

**How severe is CVE-2026-115372?** High severity, with a CVSS score of 8.5, published 22 October 2026.

**Which products and versions are affected?** LXC Incus 7.3.0 to 7.4.x before 7.5.0.

**Is there a fix for CVE-2026-115372?** Yes: fixed in Incus 7.5.0 and later. Until then: Do not grant custom volume creation to restricted projects on pools that format on copy, or set volume.block.create_options on the pool so the pool default applies instead of allowing per-volume configuration. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-115372 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-115372?** Check whether you run LXC Incus at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Incus 7.5.0 and later

Do not grant custom volume creation to restricted projects on pools that format on copy, or set volume.block.create_options on the pool so the pool default applies instead of allowing per-volume configuration.

## Technical details

The vulnerability is an argument injection flaw (CWE-88) in volume management operations. Restricted project users can set block.create_options on custom volumes through update, copy, or move operations, bypassing project restrictions. When the volume is copied or moved to a pool that formats on copy, the injected options are appended to the mkfs command line and executed as root. The attack requires the ability to create or edit custom volumes within a restricted project.

## Affected products

- LXC Incus 7.3.0 to 7.4.x before 7.5.0

## Timeline

- 2026-09-25: advisory: GitHub security advisory published
- 2026-10-22: disclosed: Public disclosure and CVE assignment

## References

- [https://github.com/lxc/incus/security/advisories/GHSA-4cph-ccqv-hm3c](https://github.com/lxc/incus/security/advisories/GHSA-4cph-ccqv-hm3c)
- [https://www.vulncheck.com/advisories/incus-7.3.0-before-7.5.0-project-restriction-bypass-via-block-create-options](https://www.vulncheck.com/advisories/incus-7.3.0-before-7.5.0-project-restriction-bypass-via-block-create-options)

## Related threats

- [Incus arbitrary file write in recursive file pull](https://junglewise.ai/threats/cve-2026-115378-incus-before-6-0-7-6-1-0-before-7-0-2-and-7-1-0-before-7-5-0)
- [Incus path traversal in instance backup dependent volumes](https://junglewise.ai/threats/cve-2026-115375-incus-7-0-0-before-7-0-2-and-7-1-0-before-7-5-0-contains-a-path)
- [Incus authorization bypass in GET /1.0/operations/{uuid}](https://junglewise.ai/threats/cve-2026-115373-incus-before-6-0-7-6-1-0-before-7-0-2-and-7-1-0-before-7-5-0)
- [Incus improper authorization in storage bucket key access](https://junglewise.ai/threats/cve-2026-115371-incus-6-0-3-before-6-0-7-6-6-0-before-7-0-2-and-7-1-0-before-7-5)
- [Incus restriction bypass in clustered migration refresh](https://junglewise.ai/threats/cve-2026-115370-incus-6-0-5-before-6-0-7-6-12-0-before-7-0-2-and-7-1-0-before-7)