The vulnerability in Incus stems from inadequate validation of the block.create_options field used when configuring a storage volume. A project‑scoped user can inject arbitrary arguments into the filesystem creation command that is run with root privileges on the host. This allows execution of arbitrary commands as root, potentially compromising the entire host, other containers, and stored data. The weakness is a classic argument injection flaw (CWE‑88).

Incus versions prior to 7.3.0 are affected. The issue exists in the 7.2.x releases of the system container and virtual machine manager. Only users who are members of a project that can create or modify volume configurations can exploit it. The security patch is included in version 7.3.0.

The CVSS base score of 9.9 classifies this flaw as Critical, indicating a severe impact on confidentiality, integrity, and availability. The EPSS score is not available, so the current exploitation probability is unclear, but the ability to execute commands as root makes it a high‑risk local privilege escalation. The vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed large‑scale exploitation yet. An attacker would need to be a member of the vulnerable project and supply malicious values for block.create_options during volume creation to exploit the flaw.