CVE-2026-115392

Name of the Vulnerable Software and Affected Versions Wasmtime versions prior to 24.0.13 Wasmtime versions 25.0.0 through 36.0.13 Wasmtime versions 37.0.0 through 46.0.2 Wasmtime versions 47.0.0 through 47.0.3

Description A filesystem sandbox escape exists in wasmtime-wasi due to the cap-std dependency mishandling symlinks that contain trailing slashes on macOS and Linux kernels that do not support openat2. This allows a guest with write access to any sandboxed directory to read and write any file accessible to the host. Additionally, guests with read-only access can read host files through existing symlinks.

Recommendations Update Wasmtime to version 24.0.13 or later. Update Wasmtime to version 36.0.14 or later. Update Wasmtime to version 46.0.3 or later. Update Wasmtime to version 47.0.4 or later.