CVE-2026-96812

HighCVSS 8.8

Published: 25/09/2026(UTC)Updated: 25/09/2026(UTC)Translated: 25/09/2026(UTC)NVD NIST

Summary

In Google gVisor prior to commit 573a9e73cf844f, on Linux platforms with CUSE enabled, improper exposure of a resource in the host file helper (gofer) allows a local attacker with container image deployment privileges to achieve root code execution on the host. By including a /dev/cuse character device node in a container image, the attacker can register a host device and exploit CUSE unrestricted ioctl handling to overwrite root udev helper memory.

Risk Assessment

An attacker can achieve root code execution on the host system, completely breaking sandbox isolation and taking control of the infrastructure.

Recommendation

Upgrade gVisor to commit 573a9e73cf844f or later. Restrict container image deployment privileges to trusted users only.

Other vulnerabilities in gVisor

CVE-2026-95702High
Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The sentry process remains confined by host-level Linux seccomp and namespace boundaries.

Original NVD description (English source)

Improper Exposure of Resource to Wrong Sphere in the host file helper (gofer) in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a /dev/cuse character device node in a container image, opening the device passes through to the host, allowing the sandboxed attacker to register a host device and exploit CUSE unrestricted ioctl handling to overwrite root udev helper memory.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS