What’s Vulnerable › Vulnerabilities

CVE-2026-115392: Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes

• Severity: high (CVSS 7.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-22 · updated 2026-10-29
• Weakness: CWE-61

Description

Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandbox escape in wasmtime-wasi because its cap-std dependency mishandles symlinks with trailing slashes on macOS and Linux kernels lacking openat2. A guest with write access to any sandboxed directory can read and write any host-accessible file, and read-only guests may read host files via preexisting symlinks.

Affected products

• bytecodealliance wasmtime: before 24.0.13; from 25.0.0 before 36.0.14; from 37.0.0 before 46.0.3; from 47.0.0 before 47.0.4 — fixed in 24.0.13, 36.0.14, 46.0.3, 47.0.4

How to fix

Upgrade to a fixed version: bytecodealliance wasmtime 24.0.13, 36.0.14, 46.0.3, 47.0.4. Check the vendor advisory for mitigations.

References

• https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vqjp-4c8c-hfgg
• https://www.vulncheck.com/advisories/wasmtime-before-24.0.13-25.0.0-before-36.0.14-37.0.0-before-46.0.3-and-47.0.0-before-47.0.4-sandbox-escape-via-trailing-slashes

Get alerted when CVE-2026-115392 or the next vulnerability affects your stack