RUSTSEC-2026-0269

vendorUSosv

Filesystem sandbox escape when paths or symlinks contain trailing slashes

view advisory published 2026-08-20Licence: CC0-1.0

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vqjp-4c8c-hfgg For more information see the GitHub-hosted security advisory.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-115392UShigh7.9—
Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandbox escape in wasmtime-wasi because its cap-std dependency mi…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan