High · published November 10, 2025
⚡ An unprivileged user can turn the tables and gain root access with just a sneaky setuid binary! This vulnerability in Incus could give a crafty user more power than intended. 🔥 Think of Incus as a restaurant with a special kitchen for privileged chefs. If a less privileged waiter manages to get a hold of the chef’s secret recipe book, they could whip up a dish that allows them to take over the whole kitchen, serving themselves high-end dishes without anyone noticing! This could lead to an unauthorized user gaining root privileges on the host system, allowing them to read, modify, or delete sensitive data, and even disrupt services. The consequences could be absolutely devastating for system integrity and security!
Think of Incus as a restaurant with a special kitchen for privileged chefs. If a less privileged waiter manages to get a hold of the chef’s secret recipe book, they could whip up a dish that allows them to take over the whole kitchen, serving themselves high-end dishes without anyone noticing! In versions prior to 6.0.6 and 6.19.0, Incus fails to properly restrict permissions for unprivileged users who can create custom storage volumes. By setting the `security.shifted` property to `true`, these users can write and execute a setuid binary from within the container, executing it as root on the host.
This could lead to an unauthorized user gaining root privileges on the host system, allowing them to read, modify, or delete sensitive data, and even disrupt services. The consequences could be absolutely devastating for system integrity and security! Upgrade to Incus version 6.0.6 or 6.19.0 as soon as it's available. In the meantime, manually restrict permissions on custom storage volumes to prevent this exploit. Audit your user permissions to ensure only trusted users have access. 🛡️ You’ve got this! With the right steps, you’ll keep your Incus environment secure in no time! 🚀