Lima v2.1.3

A critical maintenance release focused on hardening the security of the VM environment. It addresses a major privilege escalation vulnerability in the guest agent and bundles updated container tooling (nerdctl/containerd) to patch multiple upstream CVEs. The release also improves file transfer reliability and updates default OS templates.

Critical security patches for VM isolation and containerd — This update patches several critical security vulnerabilities, including a guest agent socket exploit that could allow unprivileged users to gain root access within the VM, alongside multiple CVEs in containerd. This is a mandatory update for anyone using Lima in shared or production environments.

Update nerdctl to v2.3.3 — Users of nerdctl within Lima gain access to the latest features and stability improvements, including better OCI image support and compatibility with containerd v2.3.x.