exploit-intel.com Critical CVE-2026-115889 in Wasmtime Allows Sandbox Escape
Article Content
- •CVE-2026-115889 has a CVSS score of 9.9, indicating critical severity.
- •The vulnerability allows arbitrary code execution and sandbox escape in Wasmtime.
- •Upgrading to Wasmtime version 36.0.19 or later is essential for mitigation.
CVE-2026-115889 is a critical vulnerability in the Wasmtime runtime for WebAssembly, affecting versions prior to 36.0.19 and 43.0.0. The Cranelift compiler backend's bit-packing of SSA value indices can lead to silent overflow, causing incorrect references in the intermediate representation (IR). This flaw allows attackers to exploit specially crafted Wasm modules to achieve arbitrary code execution and escape the WebAssembly sandbox. The CVSS score for this vulnerability is 9.9, indicating a critical severity level. Currently, there is no evidence of or public proof-of-concept code. Users are advised to upgrade to Wasmtime version 36.0.19 or later to mitigate the risk. If an upgrade is not immediately feasible, restricting the loading of untrusted Wasm modules is recommended.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track CVE-2026-112866 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which versions of Wasmtime are affected?
Is there any evidence of exploitation?
What should I do to protect my systems?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…