Vulnerability · Published Jul 10, 2026 · Assigned by GitHub_M

CVE-2026-53657Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket

High 8.2

In plain English

A high-severity incorrect default permissions in lima from lima-vm. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.2High

Exploit odds (30 days)0.2%top 90.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to 2.1.3, on an instance of Lima running with the qemu driver, an arbitrary user in the VM could access /run/lima-guestagent.sock when the guest agent is enabled, which could result in running arbitrary commands with root privileges in the VM because the guest agent socket provides tunneling for arbitrary addresses, including Unix socket addresses for privileged daemons like D-Bus. This issue is fixed in version 2.1.3.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Go	github.com/lima-vm/lima	no fix listed	GO-2026-6230
Go	github.com/lima-vm/lima/v2	2.1.3	GHSA-2j9v-p4xj-cjw2
Go	github.com/lima-vm/lima/v2	2.1.3	GO-2026-6230

Affected products (as reported)

Vendor	Product	Versions
lima-vm	lima	< 2.1.3

Weakness: CWE-276, CWE-668 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

https://github.com/lima-vm/lima/security/advisories/GHSA-2j9v-p4xj-cjw2 x_refsource_CONFIRM
https://github.com/lima-vm/lima/commit/8a45892378d22f40505c31a38f786a07701b6d50 x_refsource_MISC
https://github.com/lima-vm/lima/commit/b08cae8a670cf916d5da11c48a6de76dabd89678 x_refsource_MISC
https://github.com/lima-vm/lima/releases/tag/v2.1.3 x_refsource_MISC