CVE-2026-47218

Name of the Vulnerable Software and Affected Versions runwasi versions prior to 0.6.1

Description In containerd-shim-wasmtime-v1, Wasmtime precompiled bytes provided in an OCI image layer can be incorrectly treated as trusted artifacts from the precompile-cache path and deserialized as native code. This allows an attacker to bypass WebAssembly validation by using a crafted image, leading to native code execution within the shim zygote process. This results in unauthorized access to the filesystem, environment, credentials, networking, and Linux syscalls available to the workload container. The issue allows an escape from the WASI sandbox to the workload container boundary, although it does not bypass container isolation or provide direct host code execution. Downstream shims using the containerd-shim-wasm precompile-cache API that trust executable precompiled artifacts from OCI image layers are also affected.

Recommendations Update runwasi to version 0.6.1.