CVE-2026-95702

0th percentile - higher than 0% of all known CVEs

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The sentry process remains confined by host-level Linux seccomp and namespace boundaries.

An attacker with container privileges can achieve code execution in the host sentry process, potentially leading to privilege escalation and container isolation breach. Risk is high in multi-tenant environments using gVisor.

Update gVisor to release 20260831.0 or later. Restrict container privileges and monitor for unusual sentry process behavior.