CVE-2026-96812
Last modified
CVE-2026-96812 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Improper Exposure of Resource to Wrong Sphere in the host file helper (gofer) in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a /dev/cuse character device node in a container image, opening the device passes through to the host, allowing the sandboxed attacker to register a host device and exploit CUSE unrestricted ioctl handling to overwrite root udev helper memory..
Description
Improper Exposure of Resource to Wrong Sphere in the host file helper (gofer) in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a /dev/cuse character device node in a container image, opening the device passes through to the host, allowing the sandboxed attacker to register a host device and exploit CUSE unrestricted ioctl handling to overwrite root udev helper memory.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| gVisor | < 573a9e73cf844f |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-96812?
How severe is CVE-2026-96812?
How do I fix CVE-2026-96812?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-9680Improper exposure of the MCP server in alibabacloud-rds-open…5.8
- CVE-2026-96803A vulnerability was identified in java110 MicroCommunity up …7.3
- CVE-2026-96804MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits …8.8
- CVE-2026-96807In Flatpak before 1.18.1, a malicious sandboxed app can repl…4
- CVE-2026-96808In Flatpak before 1.18.1, the revokefs writer, used by the f…7.4
- CVE-2026-96810A vulnerability was identified in huanzi-qch base-admin up t…3.5
- CVE-2026-96826Improper Neutralization of Special Elements used in an SQL C…7.6
- CVE-2026-96872Improper handling of insufficient permissions or privileges …2.9
- CVE-2026-96873Improper neutralization of input during web page generation …5.5
- CVE-2026-96874Improper neutralization of input during web page generation …2.3
- CVE-2026-96875Improper neutralization of input during web page generation …6.9
- CVE-2026-96876Improper neutralization of input during web page generation …6.9
Are you affected by CVE-2026-96812?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST