gvisor-tap-vsock: Path traversal enables arbitrary file deletion on host
Summary
gvproxy, the network forwarder in the gvisor-tap-vsock package, exposes an unauthenticated /services/forwarder/expose endpoint that does not validate the caller-supplied socket path (CWE-22). An attacker who can reach this endpoint can delete arbitrary files owned by the user account running gvproxy. Red Hat states that exploitation requires code execution inside the guest VM or a container running within it, and that the endpoint is reachable only from the internal virtual-network gateway. Red Hat rates the impact as Important, while the CVSS base score is 9.3 (Critical).
Affected
- gvisor-tap-vsock 0.4.0 to before 0.9.0 (per Red Hat CVE record; provisional, not verified against NVD or the upstream advisory)
- Red Hat Build of Podman Desktop (listed as affected by default)
- Other Red Hat products are listed with status unknown.
Fixed in
- gvisor-tap-vsock 0.9.0 (upstream fix: os.Remove() removed from the Unix-socket code path, PR #718)
- Red Hat, SUSE, and Debian fix status could not be confirmed. Ubuntu lists its packages as 'Needs evaluation'.
Workaround
Unknown.
- Limit access to the gvproxy socket and gateway API to trusted users.
- Enable the token authentication for the gateway API if available in your version.
These interim controls were not verified to stop the attack.
Exploitation
- CISA SSVC: exploitation none, automatable no, technical impact partial.
- Not known to be exploited; no public proof of concept found.
- EPSS 0.00298 (third-party value).
Our recommendation
- Identify systems using gvisor-tap-vsock or gvproxy, including Podman Desktop, Rancher Desktop, and WSL networking tools.
- Update to gvisor-tap-vsock 0.9.0 or a vendor build that includes the fix.
- Until patched, restrict local access to gvproxy sockets and avoid running untrusted container images.
- Monitor for unexpected file deletions on developer workstations.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Red Hat CVE record CVE-2026-107935 access.redhat.com
- Red Hat Bugzilla 2548382 bugzilla.redhat.com
- Upstream fix PR #718 github.com
- gvisor-tap-vsock v0.9.0 release github.com
- Ubuntu security CVE-2026-107935 ubuntu.com
- OSV CVE-2026-107935 osv.dev
- HOL security tracker CVE-2026-107935 hol.org
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 02:50.
Original description (NVD)
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.