CVE-2026-107935

Description

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.

References

https://redhat.atlassian.net/browse/RHDESK-550

https://github.com/containers/gvisor-tap-vsock/pull/718

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95578

https://bugzilla.redhat.com/show_bug.cgi?id=2548382

https://access.redhat.com/security/cve/CVE-2026-107935

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3