Loading story…
Two high-severity vulnerabilities in Incus exposed users to host compromise through separate attack paths fixed in version 6.23.0. CVE-2026-33897 allows a low-privileged user to abuse pongo2 processing in instance template files to bypass expected chroot-based filesystem isolation and perform arbitrary file reads and writes as root on the host. The issue affects Incus versions prior to 6.23.0 and carries a CVSS v3.1 score reflecting high impact across confidentiality, integrity, and availability.
A second flaw, CVE-2026-33898, affects the temporary local web server launched by incus webui, which improperly accepts an invalid authentication token when that token is passed in the URL. An attacker able to reach that localhost service could obtain the same Incus access as the user who started the interface, creating a path to local privilege escalation or remote abuse if a user is lured into interacting with the web UI. The bug is tracked as CWE-287, while the template-isolation failure is mapped to CWE-1336; both issues were disclosed through GitHub security advisories and resolved in Incus 6.23.0.
Get the actors, campaigns, and ATT&CK mapping behind it.
6 events from the most recent confirmed update back to the earliest known activity.
Debian published security advisory DSA 6244-1 announcing another security update for Incus. This represents a new downstream Debian package update event separate from the earlier DSA 6212-1 advisory.
Debian published security advisory DSA 6212-1 announcing a security update for Incus. The advisory represents Debian's downstream response to address the previously disclosed Incus vulnerabilities in Debian packages.
A new advisory disclosed CVE-2026-33945, an arbitrary file write vulnerability in Incus versions prior to 6.23.0 caused by improper handling of systemd credential configuration keys in containers. A low-privileged attacker could use path traversal to write files as root outside the intended credentials directory, enabling privilege escalation or denial of service; the issue was fixed in version 6.23.0.
A GitHub security advisory disclosed CVE-2026-33898, a flaw in the temporary local web server started by `incus webui` that incorrectly accepted an invalid authentication token when passed in the URL. The bug could let an attacker reaching the localhost web server gain the same access as the user who launched the UI, and it was fixed in Incus 6.23.0.
A GitHub security advisory disclosed CVE-2026-33897, describing how low-privileged users could abuse pongo2 template functionality to bypass expected chroot isolation and read or write arbitrary files as root on the host. The issue was assigned a high-severity CVSS v3.1 score and mapped to CWE-1336.
Incus released version 6.23.0 to fix two vulnerabilities affecting prior versions: an arbitrary file read/write issue in pongo2-based instance templates and an authentication bypass in the local `incus webui` server.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Get the adversaries, campaigns, and ATT&CK mapping behind this technique, with detections ready to deploy.
6 references tracked. Mallory keeps watching after this page renders.
lists.debian.org
Open sourcelists.debian.org
Open sourcelists.debian.org
Open sourcecvefeed.io
Open sourcecvefeed.io
Open sourcecvefeed.io
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A set of **seven vulnerabilities** affecting the **Graylog Web Interface v2.2.3** was coordinated for public disclosure by **INCIBE-CERT**, including **CVE-2026-1435** (CVSS v4.0 **9.1**, **CWE-613**) and additional issues **CVE-2026-1436** (CVSS v4.0 7.0, **CWE-284**) plus **CVE-2026-1437** through **CVE-2026-1441** (CVSS v4.0 6.1, **CWE-79**). The flaws were reported as discovered by **Julen Garrido Estévez (B3xal)** and impact Graylog’s web UI component used for log management and security/IT operations. Technical details published for **CVE-2026-1435** indicate **incorrect session invalidation**: Graylog generates a new `sessionId` on each login but does **not invalidate previously issued session identifiers**, allowing a stolen/leaked old token to remain usable for authenticated requests. An attacker with network access to the Graylog web service/API (e.g., port **9000** or the server’s HTTP/S endpoint) could reuse an old `sessionId` to gain unauthorized access and act via the web UI/API under the affected account. INCIBE-CERT recommends **updating to a patched/current Graylog version**, noting older versions are considered obsolete and are not otherwise mitigated.
Jul 12, 2026
Two high-severity vulnerabilities were disclosed in **Census CSWeb 8.0.1**, including `CVE-2025-60949`, which exposed the `app/config` path over HTTP in some deployments and allowed a remote, unauthenticated attacker to retrieve configuration files and leaked secrets, and `CVE-2025-60946`, a path traversal flaw that let a remote authenticated attacker access unintended file directories. The issues were classified as **CWE-200** and **CWE-22** respectively, with both carrying high impact ratings. The configuration exposure flaw was scored with a CVSS v3.1 vector of `AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N`, while the path traversal issue received `AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`, reflecting broader impact including availability. Both vulnerabilities were reported as fixed in **Census CSWeb 8.1.0 alpha**, and the published records referenced a fixing GitHub commit, an exploit-related repository, a CISA CSAF advisory, and the official CVE entries.
Jun 29, 2026
Infinite Image Browsing fixed two related path validation flaws that could let remote attackers read files outside intended directories in deployments exposed through Stable Diffusion WebUI. The issues, tracked as **CVE-2026-77814** and **CVE-2026-77815**, affect versions through **1.8.0** and stem from the `is_path_trusted()` logic in `scripts/iib/api.py` and path resolution in `scripts/iib/tool.py`. One bug used a naive `startswith(parent_path)` check, allowing prefix-collision bypasses such as trusted `/data/images` matching `/data/images_private`; the other relied on `os.path.normpath()`, which failed to resolve symlinks and enabled escapes from scanned directories to disclose readable files such as `/etc/passwd`. The project merged a fix in pull request **#969** and commit `4057a624c7a23a36f0b4dc6a545b40767d602450`, replacing `os.path.normpath()` with `os.path.realpath()` and tightening validation to require the trusted parent path plus a trailing separator. The patch also ensures resolved paths are used for file serving, addressing **CWE-22** and **CWE-59**. The original report noted that some standalone configurations had `enable_access_control = False` by default, while network-exposed WebUI modes such as `share`, `ngrok`, `listen`, or `server_name` could automatically enable access control and therefore depend on the flawed confinement checks.
Aug 21, 2026