THREAT OPS › Threat News › [GHSA] GHSA-64f3-v33m-w89f (high) — Incus has a project restriction bypass for custom volume copy across projects
[GHSA] GHSA-64f3-v33m-w89f (high) — Incus has a project restriction bypass for custom volume copy across projects
GHSA-64f3-v33m-w89f Severity: high CVE: CVE-2026-55621
Incus has a project restriction bypass for custom volume copy across projects
### Summary
Missing authorization checks exist for custom volume copying where an attacker who knows the name of a project that they don't have access to and the name of a custom volume in that project can copy the custom volume to a new project. This issue could
Indicators of compromise
- CVE-2026-55621cve
- https://IP-REMOTE:8443url
Original source: https://github.com/advisories/GHSA-64f3-v33m-w89f