# Lima v2.1.3

- Product: Lima (https://whatsnew.fyi/product/lima)
- Vendor: Lima Project
- Date: 2026-06-19
- Version: v2.1.3
- Original notes: https://github.com/lima-vm/lima/releases/tag/v2.1.3
- Permalink: https://whatsnew.fyi/product/lima/releases/v2.1.3
- Labels: Platforms: macOS, Linux

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **changed** — Do not default containerd.user=true on non-Linux guests
- **fixed** — Copytool fallback to scp for remote source and destination in auto mode
- **changed** — Switch the default image from ubuntu-25.10 to ubuntu-26.04
- **changed** — Disable ssh.overVsock by default
- **fixed** — Propagate build failure for additional drivers
- **changed** — Update nerdctl from v2.2.2 to v2.3.3
- **security** — Fix CVE-2026-53657 (GHSA-2j9v-p4xj-cjw2) arbitrary user in a QEMU VM gaining root privilege via guest agent socket
- **security** — Fix CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262 in bundled containerd v2.3.2

- Cherry-picks from `master` to `release/2.1` (#5131)
  - limayaml: do not default containerd.user=true on non-Linux guests (#5090, thanks to @gaurav0107)
  - fix(copytool): fallback to scp for remote source and destination in auto mode (#5097, thanks to @unsuman)
  - templates: switch the default image from ubuntu-25.10 to ubuntu-26.04 (#5106)
  - krunkit: disable ssh.overVsock by default (#5123)
  - fix(makefile): propagate build failure for additional drivers (#5125, thanks to @unsuman)
  - templates: update (#5130)
  - nerdctl: update from v2.2.2 to v2.3.3 (#5134)
    - [v2.3.0 release note](https://github.com/containerd/nerdctl/releases/tag/v2.3.0)
    - [v2.3.1 release note](https://github.com/containerd/nerdctl/releases/tag/v2.3.1)
    - [v2.3.2 release note](https://github.com/containerd/nerdctl/releases/tag/v2.3.2)
    - [v2.3.3 release note](https://github.com/containerd/nerdctl/releases/tag/v2.3.3)
      - nerdctl v2.3.3 contains [containerd v2.3.2](https://github.com/containerd/containerd/releases/tag/v2.3.2), which fixes CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262

- Fix CVE-2026-53657 (GHSA-2j9v-p4xj-cjw2) "An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket"

Full changes: https://github.com/lima-vm/lima/milestone/72

##### Usage
```console
$ limactl create
$ limactl start
...
INFO[0029] READY. Run `lima` to open the shell.

$ lima uname
Linux
```

- - -
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/lima-vm/lima/actions/runs/27824357138

The sha256sum of the SHA256SUMS file itself is `ddaf499316c159493ccf853393e35c93d69e8c1f85cb041f6f7e918157625c6c` .
- - -
Release manager: @AkihiroSuda