{"id":"GHSA-2j9v-p4xj-cjw2","revision":"867b189d3b4449c1b685c6df96440e23","records":[{"revision":"867b189d3b4449c1b685c6df96440e23","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-2j9v-p4xj-cjw2","aliases":["CVE-2026-53657","GO-2026-6230"],"title":"Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket","description":"### Impact\nOn an instance of Lima running with `qemu` driver, an arbitrary user in the VM could access `/run/lima-guestagent.sock` when the guest agent is enabled.\n\nThis could result in running an arbitrary command with the root privileges in the VM (**not on the host**), as `lima-guestagent.sock` provides the tunneling service for an arbitrary address, including a Unix socket address for privileged daemons like D-Bus.\n\nThis vulnerability is not exploitable on `vz` driver, as the guest agent uses vsocks instead of Unix sockets.\n\n### Patches\nPatched in Lima v2.1.3 (8a45892378d22f40505c31a38f786a07701b6d50)\n\n> [!NOTE]\n> The default user account in the VM can still run an arbitrary command as the root via the guest agent socket.\n> This is not a vulnerability, as the user can already run an arbitrary command with `sudo` by design.\n\n### Workarounds\n- On macOS hosts, use `vz` driver instead of `qemu` (`limactl create --vm-type=vz`. Default since v1.0.)\n- Or, disable the guest agent (`limactl create --plain`)","state":0,"publishedAt":"2026-08-14T19:24:33+00:00","modifiedAt":"2026-08-18T15:10:49.8124201+00:00","affected":[{"ecosystem":"Go","name":"github.com/lima-vm/lima/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"2.1.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://github.com/lima-vm/lima/security/advisories/GHSA-2j9v-p4xj-cjw2","https://nvd.nist.gov/vuln/detail/CVE-2026-53657","https://github.com/lima-vm/lima/commit/8a45892378d22f40505c31a38f786a07701b6d50","https://github.com/lima-vm/lima/commit/b08cae8a670cf916d5da11c48a6de76dabd89678","https://github.com/lima-vm/lima","https://github.com/lima-vm/lima/releases/tag/v2.1.3"],"sourceUrl":"https://github.com/advisories/GHSA-2j9v-p4xj-cjw2","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-2j9v-p4xj-cjw2","identifiers":["GHSA-2j9v-p4xj-cjw2","CVE-2026-53657","GO-2026-6230"]},"retained":false,"historicalAffected":[]}],"coverage":[]}