CVE-2026-95702

— UNSCOREDpublic exploit available

Published 2026-10-09 · Updated 2026-10-15

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The sentry process remains confined by host-level Linux seccomp and namespace boundaries.

Weaknesses

CWE-415, CWE-416

Public exploit & PoC references

https://github.com/google/gvisor/commit/25c75149bc0eeaa6a3a49b9bbe3473588b2af6df
https://github.com/google/gvisor/commit/90bc4fc36fe442257a06ba15df00371561c183ed
https://github.com/google/gvisor/commit/e4efb89c787ef15b09e68d561f1303380e1d5a77

All references

https://github.com/google/gvisor/commit/25c75149bc0eeaa6a3a49b9bbe3473588b2af6df
https://github.com/google/gvisor/commit/90bc4fc36fe442257a06ba15df00371561c183ed
https://github.com/google/gvisor/commit/e4efb89c787ef15b09e68d561f1303380e1d5a77

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-107209PoC
CRITICALCVE-2026-5759PoC
UNSCOREDCVE-2026-94370
CRITICALCVE-2026-0163
HIGHCVE-2026-100200
CRITICALCVE-2026-100202
HIGHCVE-2026-100209
HIGHCVE-2026-100211

Related by shared AI tags and CWE weakness class. Browse the full archive.