Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.
CVE-2026-96812 is a vulnerability classified as Exposure of Resource to Wrong Sphere and Improper Privilege Management, affecting gVisor (affected versions: < 573a9e73cf844f). This vulnerability is rated High, with a CVSS score of 8.8. Current sources do not report this vulnerability as exploited.
A short verification protects the vulnerability source and prevents automated AI abuse.
Verifying...
Improper Exposure of Resource to Wrong Sphere in the host file helper (gofer) in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with CUSE enabled allows a local attacker with container image deployment privileges to achieve root code execution on the host system. By including a /dev/cuse character device node in a container image, opening the device passes through to the host, allowing the sandboxed attacker to register a host device and exploit CUSE unrestricted ioctl handling to overwrite root udev helper memory.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
en
