# Lima v2.3.0

> Kubernetes Core · 2026-11-06

A feature-rich release adds platform support and operator capabilities, changes template defaults, and includes two security fixes. The fixes address guest access to host files and unreviewed guest changes applied through `limactl shell --sync`.

## Action needed
- **[security]** `GHSA-566x-598w-h7w7` guest access to host files
  - `GHSA-566x-598w-h7w7` fixes an issue where a guest could read host files as `QEMU` option ROMs loaded from `limactl`'s current working directory.

## Check if affected
- **[security]** `GHSA-4wvf-9pjc-cpfp` protection for `limactl shell --sync`
  - Applies if you use `limactl shell --sync`.
  - `GHSA-4wvf-9pjc-cpfp` fixes `limactl shell --sync` so unreviewed guest changes are not applied to the host through the reported TOCTOU issue.
- **[breaking]** Legacy BIOS configuration for `oraclelinux-8` and `centos-stream`, removed
  - Applies if you configure `oraclelinux-8` or `centos-stream`.
  - The legacy BIOS configuration is removed for `oraclelinux-8` and `centos-stream`.

## Other recorded changes
- 38 (added 19, constraint_changed 9, default_changed 6, value_changed 4)

[Full analysis](https://ratatosk.io/en/releases/lima/v2.3.0)

[Original release notes](https://github.com/lima-vm/lima/releases/tag/v2.3.0)