A vulnerability classified as critical has been found in lxc incus 6.12/6.13. Affected is an unknown function. The manipulation leads to incorrect authorization.

This vulnerability is traded as CVE-2025-52890. The attack can only be done within the local network. There is no exploit available.

It is recommended to apply a patch to fix this issue.