lima
Security Risk Profile
70
/100
highSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 1, 2026 to present
4
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
8.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
70/100
high
📈 4 in Last 30 Days
Severity Distribution
Critical
0High
1Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
No CWE data available
Most Affected Products
1. Lima Lima2
2. Lima Lima (QEMU guest agent socket)1
3. Lima Lima QEMU guest agent1
Recent Vulnerabilities
See more →CVE-2026-53657
CVSS 8.2high
Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket
7/10/2026🔧 No Patch
https://reddit.com/r/cybersecurity/comments/1ukmkio/privilege_escalation_to_root_in_lima_qemu_guests/
unknown
Privilege escalation to root in Lima QEMU guests via a world-writable agent socket (CVE-2026-53657)
7/1/2026🔧 No Patch
https://reddit.com/r/Infosec/comments/1uklf0i/privilege_escalation_to_root_in_lima_qemu_guests/
unknown
Privilege escalation to root in Lima QEMU guests via a world-writable agent socket (CVE-2026-53657)
7/1/2026🔧 No Patch
https://reddit.com/r/netsec/comments/1ukle4i/privilege_escalation_to_root_in_lima_qemu_guests/
unknown
Privilege escalation to root in Lima QEMU guests via a world-writable agent socket (CVE-2026-53657)
7/1/2026🔧 No Patch
Monitor lima in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.