GO-2026-4704
- Source
- https://pkg.go.dev/vuln/GO-2026-4704
- Import Source
- https://vuln.go.dev/ID/GO-2026-4704.json
- JSON Data
- https://api.osv.dev/v1/vulns/GO-2026-4704
- Aliases
- Published
- 2026-03-26T20:32:44Z
- Modified
- 2026-03-26T21:02:57.078499Z
- Summary
- IncusOS has a LUKS encryption bypass due to insufficient TPM policy in github.com/lxc/incus-os/incus-osd
- Details
-
IncusOS has a LUKS encryption bypass due to insufficient TPM policy in github.com/lxc/incus-os/incus-osd
- Database specific
{ "url": "https://pkg.go.dev/vuln/GO-2026-4704", "review_status": "UNREVIEWED" }- References
-
- https://github.com/lxc/incus-os/security/advisories/GHSA-wj2j-qwcf-cfcc
- https://nvd.nist.gov/vuln/detail/CVE-2026-32606
- https://discuss.linuxcontainers.org/t/potential-luks-encryption-bypass-through-filesystem-confusion/26348
- https://github.com/lxc/incus-os/commit/e3b35f230d23443d27752eac27ebb2b22c957b75
- https://github.com/lxc/incus-os/pull/954
- https://oddlama.org/blog/bypassing-disk-encryption-with-tpm2-unlock
Affected packages
Go / github.com/lxc/incus-os/incus-osd
Package
- Name
- github.com/lxc/incus-os/incus-osd
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/lxc/incus-os/incus-osd