CERT24Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape SandboxesLoading data…
CERT24Threat Observatory
Period

Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes

Two critical Wasmtime flaws could allow a WebAssembly module controlled by an attacker to escape its sandbox. CVE-2026-115889 affects all processor architectures; CVE-2026-115893 affects only ARM64, or aarch64, systems. The maintainers have not reported any attacks.

← Back to intelligence

Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes

Two critical Wasmtime flaws could allow a WebAssembly module controlled by an attacker to escape its sandbox. CVE-2026-115889 affects all processor architectures; CVE-2026-115893 affects only ARM64, or aarch64, systems. The maintainers have not reported any attacks.