CVE-2026-55622
⚠️ highSummary
Incus is a system container and virtual machine manager. Prior to version 7.2.0, missing authorization checks exist for instance copying where an attacker knowing the name of a project that they don't have access to and the name of an instance in that project can copy the instance to a new project. This issue could allow an attacker to access secrets in instances they are not authorized to access. Version 7.2.0 patches the issue.
CVSS Score
7.7
High
EPSS Score
0.2
Exploit Probability
Published Date
2026-08-21
First Seen: 2026-08-22
📊 Relative Risk Intelligence
This CVE is Moderate Risk - more severe than 68.7% of all 349,016 vulnerabilities in our database.
#109,221
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Aug 21, 2026
🔍 Exploitation Status
Poc
Proof-of-concept available
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
SSVC data provided by
CISA
Last Modified
2026-08-21
Source
NVD 🔗
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CWE IDs (Weakness Types)