A vulnerability was found in lxc incus up to 6.x. It has been rated as problematic. This issue affects some unknown processing of the component Backup Restore Handler. The manipulation leads to improper validation of array index.
This vulnerability is traded as CVE-2026-40251. It is possible to initiate the attack remotely. There is no exploit available.
Upgrading the affected component is advised.