The attack allows a user confined to a single project to override instance configuration during migration to another cluster node. This bypasses project boundary checks, enabling flag changes such as security.privileged or raw.lxc. As a consequence, the user can obtain root-like privileges inside the container and, in the worst case, escape to the host. This is a classic missing authorization flaw (CWE‑862) and is rated with a CVSS base score of 9.9, reflecting its critical impact.

The issue affects the Incus container/VM manager provided by lxc:incus. All releases prior to 7.3.0 are vulnerable. Incus 7.3.0 and later contain the fix that enforces project restrictions during migration and sanitizes configuration overrides.

The risk is high due to the 9.9 CVSS score and the absence of exploit‑probability data; the vulnerability is not yet listed in CISA KEV, so there is no confirmed public exploitation yet. An attacker must have a project‑level account with permission to migrate instances to another cluster member, which is common in multi‑tenant deployments. Given the lack of an EPSS figure, the potential for exploitation is difficult to quantify, but the critical nature of the flaw strongly recommends immediate patching.