CVE-2026-95702
Received Received - Intake

BaseFortify

Publication date: 2026-10-09

Last updated on: 2026-10-09

Assigner: Google Inc.

Description
Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The sentry process remains confined by host-level Linux seccomp and namespace boundaries.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-09
Last Modified
2026-10-09
Generated
2026-10-09
AI Q&A
2026-10-09
EPSS Evaluated
N/A
NVD
CVE-2026-95702
EUVD
EUVD-2026-95816

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Google gVisor 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-415 The product calls free() twice on the same memory address.
CWE-416 The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a use-after-free vulnerability in the Virtual File System (VFS) of Google gVisor before release 20260831.0. A local attacker with standard container privileges can exploit it by double-freeing a MemoryFile from an in-sandbox overlay filesystem, leading to code execution in the host sentry process. The sentry process is still restricted by host-level Linux seccomp and namespace boundaries.

Impact Analysis

If you use Google gVisor prior to release 20260831.0, a local attacker with container privileges could potentially execute arbitrary code on the host system. This could allow unauthorized access, data theft, or further compromise of the host environment.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations using affected gVisor versions may face legal and regulatory penalties due to potential data exposure or loss of control over sensitive information.

Mitigation Strategies

Update Google gVisor to release 20260831.0 or later to address the use-after-free vulnerability in the VFS component.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-95702. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart