{"id":"UBUNTU-CVE-2026-107935","details":"A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.","modified":"2026-10-14T03:22:51.246944867Z","published":"2026-10-13T00:00:00Z","upstream":["CVE-2026-107935"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-107935"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-107935"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-107935"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548382"},{"type":"REPORT","url":"https://github.com/containers/gvisor-tap-vsock/pull/718"},{"type":"REPORT","url":"https://redhat.atlassian.net/browse/RHDESK-550"}],"affected":[{"package":{"name":"golang-github-containers-gvisor-tap-vsocks","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/golang-github-containers-gvisor-tap-vsocks?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.1+ds1-2","0.7.2+ds1-1"],"ecosystem_specific":{"binaries":[{"binary_name":"golang-github-containers-gvisor-tap-vsocks-dev","binary_version":"0.7.2+ds1-1"},{"binary_version":"0.7.2+ds1-1","binary_name":"gvproxy"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-107935.json"}},{"package":{"name":"golang-github-containers-gvisor-tap-vsocks","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/golang-github-containers-gvisor-tap-vsocks?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.1-3","0.8.1-3build1"],"ecosystem_specific":{"binaries":[{"binary_version":"0.8.1-3build1","binary_name":"golang-github-containers-gvisor-tap-vsocks-dev"},{"binary_name":"gvproxy","binary_version":"0.8.1-3build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-107935.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}