sshutil

Dec 23, 2025 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Nov 6, 2025 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Jul 20, 2025 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Jul 10, 2025 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

May 22, 2025 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

May 20, 2025 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

May 20, 2025 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

May 13, 2025 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Apr 17, 2025 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Mar 22, 2025 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Mar 22, 2025 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Feb 12, 2025 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Feb 7, 2025 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Jan 22, 2025 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Changes in this version

+ const EnvShellSSH

+ func SSHArguments() (arg0 string, arg0Args []string, err error)

Dec 27, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Dec 3, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Nov 8, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Nov 6, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Oct 20, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Aug 30, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Aug 29, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Aug 18, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Aug 18, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

May 7, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Mar 16, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Mar 12, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Mar 12, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Feb 1, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Jan 19, 2024 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Dec 18, 2023 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Dec 1, 2023 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Oct 13, 2023 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Oct 8, 2023 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Aug 14, 2023 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Aug 12, 2023 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Aug 4, 2023 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

May 30, 2023 GO-2026-6230

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Apr 15, 2023 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Feb 28, 2023 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Changes in this version

+ const FormatArgs

+ const FormatCmd

+ const FormatConfig

+ const FormatOptions

+ var Formats = []FormatT

+ func Format(w io.Writer, instName string, format FormatT, opts []string) error

+ type FormatT = string

Dec 23, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Dec 14, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Dec 12, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Nov 23, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Nov 16, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Oct 25, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Sep 12, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Aug 1, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Jul 19, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Jun 19, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

May 19, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Apr 25, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Mar 26, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Mar 14, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Mar 11, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Mar 10, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Feb 18, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Feb 1, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Jan 13, 2022 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Dec 14, 2021 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Nov 22, 2021 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Changes in this version

+ func DetectOpenSSHVersion() semver.Version

Nov 4, 2021 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Oct 22, 2021 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Changes in this version

+ func CommonOpts(useDotSSH bool) ([]string, error)

+ func ParseOpenSSHVersion(version []byte) *semver.Version

+ func SSHArgsFromOpts(opts []string) []string

+ func SSHOpts(instDir string, useDotSSH, forwardAgent bool) ([]string, error)

Oct 8, 2021 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Oct 8, 2021 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Oct 8, 2021 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Oct 8, 2021 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Sep 16, 2021 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Sep 4, 2021 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Sep 3, 2021 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Aug 29, 2021 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Aug 5, 2021 GO-2023-1803 +1 more

  GO-2023-1803: In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file in github.com/lima-vm/lima

  GO-2026-6230: Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket in github.com/lima-vm/lima

Changes in this version

+ func CommonArgs(useDotSSH bool) ([]string, error)

+ func RemoveKnownHostEntries(sshLocalPort int) error

+ func SSHArgs(instDir string, useDotSSH bool) ([]string, error)

+ type PubKey struct

+ Content string

+ Filename string

+ func DefaultPubKeys(loadDotSSH bool) ([]PubKey, error)