CVE-2026-115392 json
Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes
published 2mo ago modified 11d ago also EUVD-2026-108326 , GHSA-vqjp-4c8c-hfgg , RUSTSEC-2026-0269
- cvss
- 7.9
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 15%
- public exploits
- 0
- none known
Summary
Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandbox escape in wasmtime-wasi because its cap-std dependency mishandles symlinks with trailing slashes on macOS and Linux kernels lacking openat2. A guest with write access to any sandboxed directory can read and write any host-accessible file, and read-only guests may read host files via preexisting symlinks.
Patch / fix
- crates.io wasmtime 24.0.13, 36.0.14, 46.0.3, 47.0.4
- bytecodealliance wasmtime 24.0.13, 36.0.14, 46.0.3, 47.0.4
- rust-wasmtime Debian 14 36.0.20+dfsg-1
debian advisories DEBIAN-CVE-2026-115392
- github.com/bytecodealliance/wasmtime#14182 pull request
Is CVE-2026-115392 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 11d ago
Exploit prediction
0.24% chance of exploitation in the next 30 days, higher than 15% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 8.8 | CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L |
| CNA | 3.1 | 7.9 | CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L |
| CNA | 4.0 | 8.8 | CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| crates.io | wasmtime | >=0.0.0-0, <24.0.13 >=25.0.0, <36.0.14 >=37.0.0, <46.0.3 >=47.0.0, <47.0.4 |
24.0.13 36.0.14 46.0.3 47.0.4 |
Affected products
- bytecodealliance wasmtime
Classification
- Weakness
-
- CWE-61 UNIX Symbolic Link (Symlink) Following
References
-
github.com
/bytecodealliance/wasmtime/pull/14182
web
-
github.com
/bytecodealliance/wasmtime/security/advisories/GHSA-vqjp-4c8c-hfgg
vendor-advisory
-
vulncheck.com
/advisories/wasmtime-before-24.0.13-25.0.0-before-36.0.14-37.0.0-before-46.0.3-and-47.0.0-before-47.0.4-sandbo
third-party-advisory
-
crates.io
/crates/wasmtime
package
-
rustsec.org
/advisories/RUSTSEC-2026-0269.html
advisory
Sources
- CVE List CVE-2026-115392
- NVD CVE-2026-115392
- OSV RUSTSEC-2026-0269
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.