Path Traversal Vulnerability in gvisor-tap-vsock by Red Hat
CVE-2026-107935

9.3CRITICAL

Key Information:

Vendor

Red Hat
Status
Red Hat Build Of Podman Desktop
Red Hat Certification Program For Red Hat Enterprise Linux 9
Red Hat Edge Manager 1
Red Hat Enterprise Linux 10
Vendor
CVE Published:
9 October 2026

What is CVE-2026-107935?

A path traversal flaw has been identified in the gvisor-tap-vsock network forwarder, allowing unauthenticated users to exploit the /services/forwarder/expose endpoint. This vulnerability does not properly validate the socket path provided by the caller, which can lead to an attacker gaining unauthorized access to delete files on the host system. Organizations using the gvisor-tap-vsock package should take immediate precautions to mitigate the risks associated with this vulnerability.

References

https://access.redhat.com/security/cve/CVE-2026-107935
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2548382
issue-trackingx_refsource_REDHAT
https://github.com/containers/gvisor-tap-vsock/pull/718

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was discovered by Lucas Celant (Red Hat).
.