Local Incus UI web server vulnerable to nuthentication bypass
The web server spawned by incus webui incorrectly validates the authentication token such that an invalid value will be accepted.
Advisories for Golang/Github.com/Lxc/Incus/V6/Cmd/Incus package
2026