CVE-2026-53657

Status: DeferredHigh (8.2)—

Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to 2.1.3, on an instance of Lima running with the qemu driver, an arbitrary user in the VM could access /run/lima-guestagent.sock when the guest agent is enabled, which could result in running arbitrary commands with root privileges in the VM because the guest agent socket provides tunneling for arbitrary addresses, including Unix socket addresses for privileged daemons like D-Bus. This issue is fixed in version 2.1.3.

CVSS

Version: 3.1
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Base score: 8.2

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.20%
Percentile among all scored CVEs: 8
Score date: 10/4/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

🎯 ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

ExploitationT1068 Exploitation for Privilege Escalationprivilege escalation90 %
Primary impactT1059 Command and Scripting Interpreterexecution85 %
Secondary impactT1222 File and Directory Permissions Modificationdefense impairment80 %

Vulnerabilidad de escalada de privilegios local (AV:L, PR:H, sin interacción) que permite acceso a socket de agente con privilegios root en VM Linux. Usuario arbitrario ejecuta comandos con permisos elevados vía túnel D-Bus.

Inferred by our analysis agent from the official description, CVSS vector and CWE, and checked by a supervisor. May contain errors.

🛡️ ATT&CK mitigations that cover these techniques

Privileged Account Management Execution Prevention Threat Intelligence Program Restrict Web-Based Content Restrict File and Directory Permissions Limit Software Installation

Affected technologies (1)

⚠ AI-inferred from the description — NVD hasn't analyzed this CVE yet, these aren't verified CPEs.

Linuxfoundation — Lima^AI

CWEs

CWE-276, CWE-668

References

Raw JSON (NVD)

Show

{
  "id": "CVE-2026-53657",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-53657",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-07-14T01:53:00.727696Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 8.2,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 1.5
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "lima-vm",
          "product": "lima",
          "versions": [
            {
              "status": "affected",
              "version": "< 2.1.3"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-07-10T17:16:57.987",
  "references": [
    {
      "url": "https://github.com/lima-vm/lima/commit/8a45892378d22f40505c31a38f786a07701b6d50",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/lima-vm/lima/commit/b08cae8a670cf916d5da11c48a6de76dabd89678",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/lima-vm/lima/releases/tag/v2.1.3",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/lima-vm/lima/security/advisories/GHSA-2j9v-p4xj-cjw2",
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-276"
        },
        {
          "lang": "en",
          "value": "CWE-668"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to 2.1.3, on an instance of Lima running with the qemu driver, an arbitrary user in the VM could access /run/lima-guestagent.sock when the guest agent is enabled, which could result in running arbitrary commands with root privileges in the VM because the guest agent socket provides tunneling for arbitrary addresses, including Unix socket addresses for privileged daemons like D-Bus. This issue is fixed in version 2.1.3."
    }
  ],
  "lastModified": "2026-07-14T02:16:55.467",
  "sourceIdentifier": "security-advisories@github.com"
}