{"schema_version":1,"title":"Linux Containers vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 6 vulnerabilities in Linux Containers: 4 in the last 7 days and 6 in the last 90 days, 5 of them critical and 0 exploited in the wild. The most recent, LXD restricted project bypass leading to arbitrary command execution, was published on 6 November 2026. 5 vulnerabilities in the last four weeks, up from none in the four before. 4 critical against 0. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/linux-containers","json_url":"https://junglewise.ai/threats/vendors/linux-containers.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/linux-containers","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":1,"all_time":6,"critical":5,"exploited":0,"last_7_days":4,"last_30_days":5,"last_90_days":6,"last_365_days":6},"latest":[{"cvss":9.9,"slug":"lxd-has-restricted-project-bypass-leading-to-arbitrary-command-9034cd45","title":"LXD restricted project bypass leading to arbitrary command execution","severity":"critical","exploited":false,"published_at":"2026-11-06T19:51:26+00:00","url":"https://junglewise.ai/threats/lxd-has-restricted-project-bypass-leading-to-arbitrary-command-9034cd45"},{"cvss":7.7,"slug":"lxd-has-project-restriction-bypass-for-custom-volume-copy-across-d414fa7a","title":"LXD project restriction bypass in custom volume copy","severity":"high","exploited":false,"published_at":"2026-11-06T19:51:16+00:00","url":"https://junglewise.ai/threats/lxd-has-project-restriction-bypass-for-custom-volume-copy-across-d414fa7a"},{"cvss":9.9,"slug":"lxd-has-arbitrary-file-read-write-on-host-via-rootfs-symlink-in-6c2d77f1","title":"LXD arbitrary file read and write via symlink in container image","severity":"critical","exploited":false,"published_at":"2026-11-06T19:36:07+00:00","url":"https://junglewise.ai/threats/lxd-has-arbitrary-file-read-write-on-host-via-rootfs-symlink-in-6c2d77f1"},{"cvss":9.9,"slug":"lxd-has-arbitrary-file-write-on-host-via-exec-output-symlink-in-crafted-cf88efc7","title":"LXD arbitrary file write on host via exec-output symlink","severity":"critical","exploited":false,"published_at":"2026-11-06T18:45:51+00:00","url":"https://junglewise.ai/threats/lxd-has-arbitrary-file-write-on-host-via-exec-output-symlink-in-crafted-cf88efc7"},{"cve":"CVE-2026-115377","cvss":9.9,"slug":"cve-2026-115377-incus-before-6-0-7-6-1-0-before-7-0-2-and-7-1-0-before-7-5-0","title":"Incus arbitrary file write via symlink in migration","severity":"critical","exploited":false,"published_at":"2026-10-22T19:17:44.46+00:00","url":"https://junglewise.ai/threats/cve-2026-115377-incus-before-6-0-7-6-1-0-before-7-0-2-and-7-1-0-before-7-5-0"},{"cve":"CVE-2026-63125","cvss":9.9,"epss":0.0066,"slug":"cve-2026-63125-incus-arbitrary-file-write-via-backup-yaml-symlink","title":"Incus arbitrary file write via backup.yaml symlink","severity":"critical","exploited":false,"published_at":"2026-08-21T15:16:46.427+00:00","url":"https://junglewise.ai/threats/cve-2026-63125-incus-arbitrary-file-write-via-backup-yaml-symlink"}],"vendor":{"hub":true,"name":"Linux Containers","slug":"linux-containers","description":"Community project that develops container technologies including LXC, LXD, and Incus.","url":"https://junglewise.ai/threats/vendors/linux-containers"},"weekly":[{"week":"2026-08-17","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":3,"exploited":0,"vulnerabilities":4},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-63125","cvss":9.9,"epss":0.0066,"slug":"cve-2026-63125-incus-arbitrary-file-write-via-backup-yaml-symlink","title":"Incus arbitrary file write via backup.yaml symlink","severity":"critical","exploited":false,"published_at":"2026-08-21T15:16:46.427+00:00","url":"https://junglewise.ai/threats/cve-2026-63125-incus-arbitrary-file-write-via-backup-yaml-symlink"},{"cvss":9.9,"slug":"lxd-has-restricted-project-bypass-leading-to-arbitrary-command-9034cd45","title":"LXD restricted project bypass leading to arbitrary command execution","severity":"critical","exploited":false,"published_at":"2026-11-06T19:51:26+00:00","url":"https://junglewise.ai/threats/lxd-has-restricted-project-bypass-leading-to-arbitrary-command-9034cd45"},{"cvss":9.9,"slug":"lxd-has-arbitrary-file-read-write-on-host-via-rootfs-symlink-in-6c2d77f1","title":"LXD arbitrary file read and write via symlink in container image","severity":"critical","exploited":false,"published_at":"2026-11-06T19:36:07+00:00","url":"https://junglewise.ai/threats/lxd-has-arbitrary-file-read-write-on-host-via-rootfs-symlink-in-6c2d77f1"},{"cvss":9.9,"slug":"lxd-has-arbitrary-file-write-on-host-via-exec-output-symlink-in-crafted-cf88efc7","title":"LXD arbitrary file write on host via exec-output symlink","severity":"critical","exploited":false,"published_at":"2026-11-06T18:45:51+00:00","url":"https://junglewise.ai/threats/lxd-has-arbitrary-file-write-on-host-via-exec-output-symlink-in-crafted-cf88efc7"},{"cve":"CVE-2026-115377","cvss":9.9,"slug":"cve-2026-115377-incus-before-6-0-7-6-1-0-before-7-0-2-and-7-1-0-before-7-5-0","title":"Incus arbitrary file write via symlink in migration","severity":"critical","exploited":false,"published_at":"2026-10-22T19:17:44.46+00:00","url":"https://junglewise.ai/threats/cve-2026-115377-incus-before-6-0-7-6-1-0-before-7-0-2-and-7-1-0-before-7-5-0"},{"cvss":7.7,"slug":"lxd-has-project-restriction-bypass-for-custom-volume-copy-across-d414fa7a","title":"LXD project restriction bypass in custom volume copy","severity":"high","exploited":false,"published_at":"2026-11-06T19:51:16+00:00","url":"https://junglewise.ai/threats/lxd-has-project-restriction-bypass-for-custom-volume-copy-across-d414fa7a"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Linux Containers LXD","slug":"linux-containers-lxd","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/linux-containers-lxd"}]}