All vulnerabilities
CVE-2026-115392GHSA-vqjp-4c8c-hfgg

Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes

bytecodealliance wasmtime
Open in ThreatlineRecord JSON
CVSS
8.8High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.24%Chance of exploitation activity in the next 30 days, higher than 14% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in24.0.13Also 36.0.14, 46.0.3 and 1 moreCVE List
Published22 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

Show all 8 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandbox escape in wasmtime-wasi because its cap-std dependency mishandles symlinks with trailing slashes on macOS and Linux kernels lacking openat2. A guest with write access to any sandboxed directory can read and write any host-accessible file, and read-only guests may read host files via preexisting symlinks.

Text from CVE List

Affected versions 12

  • wasmtimeaffected: all versions before 24.0.13CVE List
  • wasmtimeunaffected: 24.0.13CVE List
  • wasmtimeaffected: 25.0.0 before 36.0.14CVE List
  • wasmtimeunaffected: 36.0.14CVE List
  • wasmtimeaffected: 37.0.0 before 46.0.3CVE List
  • wasmtimeunaffected: 46.0.3CVE List
  • wasmtimeaffected: 47.0.0 before 47.0.4CVE List
  • wasmtimeunaffected: 47.0.4CVE List
  • wasmtime, rust<= 24.0.12GitHub
  • wasmtime, rust>= 25.0.0, <= 36.0.13GitHub
  • wasmtime, rust>= 37.0.0, <= 46.0.2GitHub
  • wasmtime, rust >= 47.0.0, <= 47.0.3GitHub

References 2