CVE WATCH / VULNERABILITY DETAIL
CVE-2026-115392
HIGHCVSS 7.9NVD feed
Published 22 October 2026 · tracked since 23 October 2026
Description
Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandbox escape in wasmtime-wasi because its cap-std dependency mishandles symlinks with trailing slashes on macOS and Linux kernels lacking openat2. A guest with write access to any san
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-115366 LOW 2.6
- CVE-2026-115373 MEDIUM 6.3
- CVE-2026-115356 MEDIUM 5.4
- CVE-2026-114654 MEDIUM 6.5
- CVE-2026-114644 MEDIUM 5.9
- CVE-2026-114645 MEDIUM 5.2
- CVE-2026-114612 CRITICAL 9.9
- CVE-2026-114613 HIGH 7.5
- CVE-2022-51026 CRITICAL 9.8
- CVE-2026-77156 MEDIUM 6.4