CyberSecBulletin

Lima-vm vulnerabilities

We track 1 vulnerability in Lima-vm products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 10, 2026.

1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score

Latest Lima-vm vulnerabilities

  • 8.2 High severity

    lima: Incorrect Default Permissions

    CVE-2026-53657Lima-vm

    Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to 2.1.3, on an instance of Lima running with the qemu driver, an arbitrary user in the VM could access /run/lima-guestagent.sock when the guest agent is enabled, which cou