CVE-2026-95702 PUBLISHED

Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile

Assigner: Google
Reserved: 22.09.2026 Published: 09.10.2026 Updated: 09.10.2026

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The sentry process remains confined by host-level Linux seccomp and namespace boundaries.

Metrics

CVSS 4.0

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score: 8.5

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Local	Confidentiality	High	Confidentiality	None
Attack Complexity	Low	Integrity	High	Integrity	None
Attack Requirements	None	Availability	High	Availability	None
Privileges Required	Low
User Interaction	None

CVSS 4.0

Product Status

Vendor	Google
Product	gVisor
Versions	Default: unaffected affected from 0 to 20260831.0 (excl.)

Credits

Mikhail Sosonkin from OpenAI finder

References

Problem Types

CWE-416 Use After Free CWE
CWE-415 Double Free CWE

Impacts

CAPEC-480 Escaping Virtualization
CAPEC-233 Privilege Escalation