Vulnerability Report: GO-2026-4886
- CVE-2026-33743, GHSA-vg76-xmhg-j5x3
- Affects: github.com/lxc/incus, github.com/lxc/incus/v6
- Published: Apr 07, 2026
Incus vulnerable to denial of source through crafted bucket backup file in github.com/lxc/incus
For detailed information about this vulnerability, visit https://github.com/lxc/incus/security/advisories/GHSA-vg76-xmhg-j5x3.
Affected Modules
-
PathGo Versions
-
all versions, no known fixed
-
before v6.23.0
Aliases
References
- https://github.com/lxc/incus/security/advisories/GHSA-vg76-xmhg-j5x3
- https://github.com/lxc/incus/commit/4bca6332e8227a5f25f74b51a66b7382e9133aaa
- https://github.com/lxc/incus/releases/tag/v6.23.0
- https://vuln.go.dev/ID/GO-2026-4886.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.