What’s Vulnerable › Vulnerabilities

CVE-2026-48546: KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-11 · updated 2026-10-26
• Weakness: CWE-693

Description

KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js vm.runInNewContext() sandbox context in the issue-auto-respond.yml workflow. Attackers can submit a pull request modifying messages.cjs to import arbitrary Node.js modules, bypassing sandbox restrictions and achieving remote code execution with full GitHub Actions runner privileges including access to AUTOMATION_PR_TOKEN.

Affected products

• lingdojo kana-dojo: before 0.1.18 — fixed in 0.1.18

How to fix

Upgrade to a fixed version: lingdojo kana-dojo 0.1.18. Check the vendor advisory for mitigations.

References

• https://github.com/lingdojo/kana-dojo/commit/31b85a5d7c4b323ddeba3b2dc5e7807558710544
• https://github.com/lingdojo/kana-dojo/releases/tag/v0.1.18
• https://www.vulncheck.com/advisories/kanadojo-sandbox-escape-rce-via-messages-cjs

Get alerted when CVE-2026-48546 or the next vulnerability affects your stack