[SOLVED] Are there mitigations available for CVE-2026-64561 'Zapscape'

[synvara]

Hello.

There is again a exploit called "Zapscape"

Is Proxmox aware of this explot, and perhaps are aware of any possible mitigations?

https://github.com/V4bel/Zapscape

 

[leesteken]

Is Proxmox aware of this explot

it's literally the first/top-most thread (several hours ago) before you posted. Try using the search: https://forum.proxmox.com/search/19858083/?q=CVE-2026-64561&o=date next time.

 

[synvara]

it's literally the first/top-most thread (several hours ago) before you posted. Try using the search: https://forum.proxmox.com/search/19858083/?q=CVE-2026-64561&o=date next time.

im sorry

 

[leesteken]

It's all good, welcome at the forum. Do you need more information about possible mitigations or can you mark this thread as solved (by editing the thread and selecting Solved from the pull-down menu)?

 

[leesteken]

and perhaps are aware of any possible mitigations?

I don't see much about mitigation for this vulnerability: https://github.com/V4bel/Zapscape . Maybe not allowing access to the root account inside the VM (and patching them against known LPEs)?

 

[gfngfn256]

From the proxmox-kernel-7.0 (7.0.14-9) changelog (available on pve no-subscription repo):

proxmox-kernel-7.0 (7.0.14-9) trixie; urgency=medium

  * update submodules and patches to Ubuntu-7.0.0-31.31
    - various regression fixes since 7.0.0-28.28i3

  * fix several CVEs:
    - CVE-2026-64561
    - CVE-2026-64562
    - CVE-2026-64581
    - CVE-2026-64572
    - CVE-2026-64580
    - CVE-2026-64579
    - CVE-2026-64566
    - CVE-2026-64567
    - CVE-2026-64047

 -- Proxmox Support Team <support@proxmox.com>  Wed, 05 Aug 2026 14:16:31 +0200