{"id":"CVE-2026-107935","published":"2026-10-09T10:16:37.497","lastModified":"2026-10-12T10:16:43.180","description":"A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.","cvssScore":9.3,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-107935","tags":[]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548382","tags":[]},{"url":"https://github.com/containers/gvisor-tap-vsock/pull/718","tags":[]},{"url":"https://redhat.atlassian.net/browse/RHDESK-550","tags":[]}],"exploitRefs":[{"url":"https://github.com/containers/gvisor-tap-vsock/pull/718","tags":[]}],"hasPoc":true,"ai":{"summary":"A path traversal vulnerability in gvproxy allows unauthenticated attackers to delete arbitrary files on the host system through the /services/forwarder/expose endpoint. This occurs because the service fails to validate socket paths provided by callers, enabling attackers to craft malicious paths that traverse outside the intended directory structure.","exploitability":"Exploitation is straightforward with no authentication required, needing only access to the vulnerable endpoint on a system running gvproxy, typically in containerized environments where gvisor-tap-vsock is used for networking.","blast_radius":"The impact could be severe in containerized environments where gvproxy runs with elevated privileges, potentially allowing attackers to delete critical system files, configuration data, or container runtime artifacts that could lead to service disruption or complete system compromise.","remediation":"Upgrade to gvisor-tap-vsock version 2.590 or later which contains the fix for this path traversal vulnerability.","detection":"Monitor for unusual DELETE requests to paths that traverse outside typical application directories in the gvproxy process logs, particularly when these requests originate from the /services/forwarder/expose endpoint.","tags":["path-traversal","container","networking","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-12T08:51:27.124Z"}}