High 8.5Published Oct 9, 2026

CVE-2026-95702Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile

Updated under an hour ago (2026-10-19 10:10 UTC)

Does this affect you?

It affects Google gVisor. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 0.08%, higher than 0% of scored CVEs.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Google gVisor

Exploited in the last 30 days

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The sentry process remains confined by host-level Linux seccomp and namespace boundaries.

CVSS: 8.5 HIGH (v4.0, CNA)CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weakness (CWE): CWE-416, CWE-415
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): 0.08% (percentile 0)
Assigned by: Google
NVD analysis: Awaiting Analysis
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Google gVisor google:gvisor (from the name)	before 20260831.0	CNA record

References

https://github.com/google/gvisor/commit/90bc4fc36fe442257a06ba15df00371561c183ed
https://github.com/google/gvisor/commit/25c75149bc0eeaa6a3a49b9bbe3473588b2af6df
https://github.com/google/gvisor/commit/e4efb89c787ef15b09e68d561f1303380e1d5a77

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.