High · published January 22, 2026
⚡ A crafty user can exploit newline injection to execute commands on the host system, all thanks to Incus versions 6.20.0 and below! 🚨 Think of it like a sneaky chef who finds a way to add a secret ingredient into a recipe by slipping in extra lines on the order form — suddenly, the kitchen is cooking up something entirely unexpected! 🍽️ An attacker with access can insert arbitrary configuration items into the container's lifecycle, which opens the door to running any command on the host machine. This could lead to full system compromise, leaking sensitive data, or even more devastating consequences. It's a serious risk that could put your entire environment in jeopardy! 🔥
Think of it like a sneaky chef who finds a way to add a secret ingredient into a recipe by slipping in extra lines on the order form — suddenly, the kitchen is cooking up something entirely unexpected! 🍽️ This vulnerability allows users with the ability to launch containers to manipulate their YAML configurations by injecting newlines. This results in unauthorized configuration modifications in the lxc.conf file, leading to remote command execution on the host.
An attacker with access can insert arbitrary configuration items into the container's lifecycle, which opens the door to running any command on the host machine. This could lead to full system compromise, leaking sensitive data, or even more devastating consequences. It's a serious risk that could put your entire environment in jeopardy! 🔥 To mitigate this vulnerability, ensure you upgrade to Incus versions 6.0.6 or 6.21.0 as soon as they are released. In the meantime, restrict access so that only trusted users can launch containers and review any current configurations for potential exploits. 🛡️ You've got this! Stay proactive and keep your systems secure! ✨