CVE-2026-107935
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
gvisor-tap-vsock
- Vendor
- Unknown
- Product
- Unknown
- Platforms
- Unknown
- Default status
unaffected- Package
- gvisor-tap-vsock
- Package collection
- https://github.com/containers/gvisor-tap-vsock
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0.4.0 | affected | semver | 0.9.0 | Unavailable | None listed |
Red Hat Build of Podman Desktop
- Vendor
- Red Hat
- Product
- Red Hat Build of Podman Desktop
- Platforms
- Unknown
- Default status
affected- Package
- rh-podman-desktop
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Certification Program for Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Certification Program for Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
unknown- Package
- rhcertification/redhat-certification-system-ai-10
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Edge Manager 1
- Vendor
- Red Hat
- Product
- Red Hat Edge Manager 1
- Platforms
- Unknown
- Default status
unknown- Package
- rhem/flightctl-imagebuilder-worker-rhel10
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
unknown- Package
- gvisor-tap-vsock
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
unknown- Package
- podman
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
unknown- Package
- rhel10/bootc-image-builder
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
unknown- Package
- rhel10-eus/rhel-10.0-bootc
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
unknown- Package
- rhel10-eus/rhel-10.2-bootc
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
unknown- Package
- rhel10/rhel-bootc
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 10
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 10
- Platforms
- Unknown
- Default status
unknown- Package
- ubi10/podman
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 8
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 8
- Platforms
- Unknown
- Default status
unknown- Package
- container-tools:rhel8/podman
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
unknown- Package
- gvisor-tap-vsock
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Enterprise Linux 9
- Vendor
- Red Hat
- Product
- Red Hat Enterprise Linux 9
- Platforms
- Unknown
- Default status
unknown- Package
- podman
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Hardened Images
- Vendor
- Red Hat
- Product
- Red Hat Hardened Images
- Platforms
- Unknown
- Default status
unknown- Package
- podman
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unknown- Package
- openshift4/microshift-bootc-rhel10
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Container Platform 4
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Container Platform 4
- Platforms
- Unknown
- Default status
unknown- Package
- podman
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenShift Dev Spaces
- Vendor
- Red Hat
- Product
- Red Hat OpenShift Dev Spaces
- Platforms
- Unknown
- Default status
affected- Package
- devspaces/udi-base-rhel10
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat OpenStack Platform 18.0
- Vendor
- Red Hat
- Product
- Red Hat OpenStack Platform 18.0
- Platforms
- Unknown
- Default status
unknown- Package
- rhoso-operators/prometheus-podman-exporter-rhel9
- Package collection
- https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.