Announcing Incus 7.2!

[Stéphane Graber]

Hello,

The Incus team is pleased to announce the release of Incus 7.2!

It’s another pretty busy release for us with a varied set of new
features across the board as well as the usual set of performance
improvements and bugfixes.

Security fixes:

- CVE-2026-48749 (critical) – Arbitrary file read+write on host via
rootfs/ symlink in malicious image
- CVE-2026-48750 (critical) – Arbitrary file write on host via
exec-output symlink in crafted image
- CVE-2026-48751 (critical) – Restricted project bypass leading to
arbitrary command execution
- CVE-2026-48752 (critical) – Arbitrary file read+write on host via
templates/ symlink in malicious image
- CVE-2026-48755 (critical) – Argument injection in backup
compression algorithm leading to arbitrary file write and command
execution
- CVE-2026-48769 (critical) – Arbitrary file write on client due to
trusted image hash
- CVE-2026-55621 (high) – Project restriction bypass for custom
volume copy across projects
- CVE-2026-55622 (high) – Project restriction bypass in instance copy
across projects

The full list of new features for this release of Incus are:

- Per-instance SELinux integration
- New incus default CLI command
- Filtered server info by default
- Keepalive timeout from the CLI
- Better OS-specific handling of CLI configuration
- Standalone server certificate update
- Static network configuration for OCI containers
- Per-instance BGP route advertisement
- Dynamic addresses in proxy NAT mode
- Expanded NBD access to VMs
- Btrfs compression for storage volumes
- InfiniBand SR-IOV GUID configuration
- Websocket origin restriction

You can give Incus a try online:
https://linuxcontainers.org/incus/try-it

Before getting it on your own system:
https://linuxcontainers.org/incus/docs/main/tutorial/first_steps

A detailed release announcement can be found here:
https://discuss.linuxcontainers.org/t/incus-7-2-has-been-released/26879

As well as a video overview of all the new features:
https://www.youtube.com/watch?v=rcldqF6SpXA

The code can be found on Github:
https://github.com/lxc/incus

And support is done through our community forum and live chat:
https://discuss.linuxcontainers.org

Enjoy!

Stéphane Graber, on behalf of the Incus team.