by Kastro CVE-2026-107935
Red Hat Red Hat Build of Podman Desktop — Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose
Description · from the CVE record
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.
Affected
ProductAffectedFixed inSource
gvisor-tap-vsock0.4.0 – < 0.9.00.9.0CNA
Red Hat Build of Podman Desktopsee advisory–CNA
Red Hat Certification Program for Red Hat Enterprise Linux 9see advisory–CNA
Red Hat Edge Manager 1see advisory–CNA
Red Hat Enterprise Linux 10see advisory–CNA
Red Hat Enterprise Linux 10see advisory–CNA
Red Hat Enterprise Linux 10see advisory–CNA
Red Hat Enterprise Linux 10see advisory–CNA
Red Hat Enterprise Linux 10see advisory–CNA
Red Hat Enterprise Linux 10see advisory–CNA
Red Hat Enterprise Linux 10see advisory–CNA
Red Hat Enterprise Linux 8see advisory–CNA
Scores by source
redhat (CNA)9.3CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial