A vulnerability classified as critical has been found in lxc incus up to 6.0.5/6.20.0. Impacted is an unknown function of the component Ttemplating. This manipulation causes path traversal.
This vulnerability appears as CVE-2026-23954. The attacker needs to be present on the local network. There is no available exploit.
