Incus is an open source container and virtual machine manager. In versions prior to 7.0.0, the image import flow issues an outbound HEAD request to a user-supplied URL before validating the request against project restrictions such as restricted.images.servers. The imgPostURLInfo function constructs and sends a HEAD request directly from the attacker-supplied source URL to resolve image metadata, and this network interaction occurs before the flow reaches the point where the import would be rejected by policy. Although the actual image download is blocked by the project restriction, an authenticated user can coerce the daemon into making blind HEAD requests to arbitrary destinations. These requests include server metadata in custom headers (Incus-Server-Architectures, Incus-Server-Version), which discloses information about the host environment to the attacker-controlled endpoint. This blind SSRF primitive can be used to probe internal services, unroutable address space, or cloud metadata endpoints reachable from the host. This vulnerability pattern is similar to CVE-2026-24767. This issue has been fixed in version 7.0.0.

The remote host is affected by the vulnerability described in GLSA-202608-23 (Incus: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Incus. Please review the CVE identifiers referenced below     for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Incus is an open source container and virtual machine manager. In versions prior to 7.0.0, the image
    import flow issues an outbound HEAD request to a user-supplied URL before validating the request against
    project restrictions such as restricted.images.servers. The imgPostURLInfo function constructs and sends a
    HEAD request directly from the attacker-supplied source URL to resolve image metadata, and this network
    interaction occurs before the flow reaches the point where the import would be rejected by policy.
    Although the actual image download is blocked by the project restriction, an authenticated user can coerce
    the daemon into making blind HEAD requests to arbitrary destinations. These requests include server
    metadata in custom headers (Incus-Server-Architectures, Incus-Server-Version), which discloses information
    about the host environment to the attacker-controlled endpoint. This blind SSRF primitive can be used to
    probe internal services, unroutable address space, or cloud metadata endpoints reachable from the host.
    This vulnerability pattern is similar to CVE-2026-24767. This issue has been fixed in version 7.0.0.
    (CVE-2026-35527)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Incus is an open source container and virtual machine manager. In versions prior to 7.0.0, the image     import flow issues an outbound HEAD request to a user-supplied URL before validating the request against     project restrictions such as restricted.images.servers. The imgPostURLInfo function constructs and sends a     HEAD request directly from the attacker-supplied source URL to resolve image metadata, and this network     interaction occurs before the flow reaches the point where the import would be rejected by policy.
    Although the actual image download is blocked by the project restriction, an authenticated user can coerce     the daemon into making blind HEAD requests to arbitrary destinations. These requests include server     metadata in custom headers (Incus-Server-Architectures, Incus-Server-Version), which discloses information     about the host environment to the attacker-controlled endpoint. This blind SSRF primitive can be used to     probe internal services, unroutable address space, or cloud metadata endpoints reachable from the host.
    This vulnerability pattern is similar to CVE-2026-24767. This issue has been fixed in version 7.0.0.
    (CVE-2026-35527)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
339353	GLSA-202608-23 : Incus: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
441061	SCA: security update for github.com/lxc/incus/v6/cmd/incusd (GHSA-8gw4-p4wq-4hcv)	Tenable Cloud Security	SCA Checks	Local	medium
441061	SCA: security update for github.com/lxc/incus/v6/cmd/incusd (GHSA-8gw4-p4wq-4hcv)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
311636	Linux Distros Unpatched Vulnerability : CVE-2026-35527	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-35527

medium

Tenable Plugins

high

medium

medium

medium