Anyone running Incus in production should update immediately. Version 7.5 patches 11 security vulnerabilities, five of them rated critical, including arbitrary file write and deletion on the host via btrfs subvolume path traversal (CVE-2026-85185, CVE-2026-85526) and symlink attacks in migration streams (GHSA-579w-c4rw-c8q3) and backup dependent volumes (GHSA-hpjh-q53p-f27r). A fifth critical issue allows project restriction bypasses through volume operations. Three additional high and medium severity bugs cover authorization bypasses, S3 bucket object reads via unsigned headers, and a CLI file write vulnerability triggered by a malicious incus-agent. Note that the actual download version is 7.5.1, as the initial 7.5.0 build had artifact issues and required a re-release.
On the networking side, OVN networks can now be created as children of an existing OVN network. Rather than spinning up a separate logical router per network, a child network attaches its logical switch and subnet to the parent's router, sharing its uplink, external address, and peerings. Each child keeps its own subnet, DHCP, DNS records, and ACLs, and can enable NAT independently, making it straightforward to run one subnet with address translation and another with native routing on the same logical router. For cluster operators, running instances can now be live-migrated to a different project on another cluster member in a single command, and a new set of incus_cluster_member Prometheus metrics expose architecture, status, roles, and failure domains directly to monitoring stacks.
Incus 7.5 also brings meaningful improvements for GPU workloads and OCI container workflows. Physical GPU devices passed through to virtual machines now support an nvidia.clique configuration key that groups up to 16 GPUs into a GPUDirect P2P clique, enabling direct DMA between cards inside the guest. OCI images imported from registries now expose their standard org.opencontainers.image.* labels as oci.* image properties visible through incus image info, and the image environment is no longer baked into instance configuration at creation time, instead serving as the default for incus exec so that image updates can carry environment changes without manual cleanup.
The release rounds out its feature set with new instance security tags that feed directly into OpenFGA for tag-based access policies, OIDC claims exposed to the authorization scriptlet for identity-provider-aware rules, and an --archive flag for incus file push and incus file pull that preserves ownership, mode, and timestamps like cp -a. The Incus agent now runs on NetBSD alongside the existing Linux, FreeBSD, macOS, and Windows guests, and the client is available via FreeBSD Ports with pkg install incus-client. Go pprof profiles are now accessible over the API at /internal/debug/pprof/ on any listener, without needing to configure a debug address. Installation instructions and release tarballs are available from the Incus documentation.
