CVE-2026-33897

CVE-2026-33897 details a critical arbitrary read/write vulnerability in Incus system container and virtual machine manager versions prior to 6.23.0. This flaw allows an attacker to leverage instance template files, specifically pongo2 templates, to bypass intended chroot isolation and gain root-level file system access on the host server. Rated 9.9 CRITICAL, the vulnerability has a network attack vector, requires low privileges, and has low attack complexity, enabling a remote attacker to achieve complete compromise of the host system's confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has received some community discussion, including announcements of the CVE and the release of the patched version.