{"uuid": "3c43443a-252b-4adb-8231-d98d58e8ccfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53657", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/188575", "content": "Privilege escalation to root in Lima QEMU guests via a world-writable agent socket (CVE-2026-53657)\nhttps://www.reddit.com/r/redteamsec/comments/1ukleoz/privilege_escalation_to_root_in_lima_qemu_guests/\n\nAn unprivileged user inside a Lima QEMU guest could reach the root-owned guest-agent socket and run commands as root in the VM. Fixed in Lima v2.1.3. Lima scored it High, CVSS 8.2 with Scope: Changed, reflecting that crossing from an unprivileged account to root within the VM crosses a security boundary that other components rely on. Full write up is available on the Syntetisk blog.    submitted by    /u/Sandwich_1337  (https://www.reddit.com/user/Sandwich_1337) \n [link] (https://syntetisk.tech/blog/posts/privilege-escalation-to-root-in-lima-qemu-guests-via-a-world-writable-agent-socket-cve-2026-53657/)   [comments] (https://www.reddit.com/r/redteamsec/comments/1ukleoz/privilege_escalation_to_root_in_lima_qemu_guests/)", "creation_timestamp": "2026-09-02T01:00:23.982687Z"}