---
title: "Security digest: June 26, 2026"
url: https://erroneo.us/security/2026-06-26/
description: "June 26, 2026 vulnerability digest: 15 critical advisories (Go, Hex (Erlang/Elixir)…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2026-06-26
date_modified: 2026-06-26
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: June 26, 2026

15 critical advisories.

## Take stock

- Go: 9 critical advisories ( github.com/lxc/incus/v7/cmd/incusd , github.com/nezhahq/nezha ). Check with govulncheck ./... .
- PyPI: 3 critical advisories ( backpropagate , semantic-router , mcp-pinot-server ). Check with pip-audit (or: pip show <package>) .
- npm: 2 critical advisories ( @mcptoolshop/backpropagate , @deepstream/server ). Check with npm audit (or: npm ls <package>) .
- Hex (Erlang/Elixir): 1 critical advisory ( relyra ). Check with mix hex.audit .
- RubyGems: 1 critical advisory ( fluentd ). Check with bundle audit check --update .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

None.

## Critical advisories

- [CVE-2026-48752](https://erroneo.us/security/cve/CVE-2026-48752/index.md) Incus has arbitrary file read+write on host via templates/ symlink in malicious image — Go github.com/lxc/incus/v7/cmd/incusd < 7.2.0 → 7.2.0
- [CVE-2026-48755](https://erroneo.us/security/cve/CVE-2026-48755/index.md) Incus has an argument injection in backup compression algorithm leading to AFW and ACE — Go github.com/lxc/incus/v7/cmd/incusd < 7.2.0 → 7.2.0
- [GHSA-q6xx-5vr8-p898](https://erroneo.us/security/ghsa/GHSA-q6xx-5vr8-p898/index.md) Nezha vulnerable to cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check — Go github.com/nezhahq/nezha >= 1.14.13, <= 1.14.14 → no fix; Go github.com/nezhahq/nezha >= 2.0.0, <= 2.0.9 → 2.0.10
- [CVE-2026-49454](https://erroneo.us/security/cve/CVE-2026-49454/index.md) Relyra SAML SignatureValue not cryptographically verified -> authentication bypass — Hex (Erlang/Elixir) relyra >= 1.0.0, < 1.2.0 → 1.2.0
- [CVE-2026-48769](https://erroneo.us/security/cve/CVE-2026-48769/index.md) Incus has an arbitrary file write on its client due to trusted image hash — Go github.com/lxc/incus/v7/cmd/incusd < 7.2.0 → 7.2.0
- [CVE-2026-48797](https://erroneo.us/security/cve/CVE-2026-48797/index.md) Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication — PyPI backpropagate >= 1.1.0, < 1.2.0 → 1.2.0; npm @mcptoolshop/backpropagate >= 1.1.0, < 1.2.0 → 1.2.0
- [CVE-2026-48753](https://erroneo.us/security/cve/CVE-2026-48753/index.md) Incus has an arbitrary file write via path traversal in S3 multipart upload — Go github.com/lxc/incus/v7/cmd/incusd < 7.1.0 → 7.1.0
- [CVE-2026-49252](https://erroneo.us/security/cve/CVE-2026-49252/index.md) deepstream is vulnerable to prototype pollution — npm @deepstream/server < 10.0.5 → 10.0.5
- [GHSA-98x5-vq43-vc5p](https://erroneo.us/security/ghsa/GHSA-98x5-vq43-vc5p/index.md) semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin — PyPI semantic-router >= 0.1.8, < 0.1.15 → 0.1.15
- [CVE-2026-48750](https://erroneo.us/security/cve/CVE-2026-48750/index.md) Incus has an arbitrary file write on host via `exec-output` symlink in crafted image — Go github.com/lxc/incus/v7/cmd/incusd < 7.2.0 → 7.2.0
- [CVE-2026-49257](https://erroneo.us/security/cve/CVE-2026-49257/index.md) mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind — PyPI mcp-pinot-server <= 3.0.1 → 3.1.0
- [CVE-2026-53519](https://erroneo.us/security/cve/CVE-2026-53519/index.md) Nezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key — Go github.com/nezhahq/nezha < 2.0.13 → 2.0.13
- [CVE-2026-48751](https://erroneo.us/security/cve/CVE-2026-48751/index.md) Incus has a restricted project bypass leading to arbitrary command execution — Go github.com/lxc/incus/v7/cmd/incusd < 7.2.0 → 7.2.0
- [CVE-2026-44024](https://erroneo.us/security/cve/CVE-2026-44024/index.md) Fluentd is Vulnerable to Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder — RubyGems fluentd <= 1.19.2 → 1.19.3
- [CVE-2026-48749](https://erroneo.us/security/cve/CVE-2026-48749/index.md) Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image — Go github.com/lxc/incus/v7/cmd/incusd < 7.2.0 → 7.2.0

---
Source page: https://erroneo.us/security/2026-06-26/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt