Wasmtime sandbox escape flaws patched in Cranelift
Original title: Wasmtime Sandbox Escape Flaws Patched in Cranelift
The supplied page text gives no CVEs, versions, or exploitation status for the Cranelift fixes.
A SOCRadar post title says sandbox escape flaws in Wasmtime were patched in Cranelift. The captured page text is site navigation and does not describe the bugs, affected builds, or whether they are exploited.
Unconfirmed: Technical details are absent from the captured text, so scope and patch status cannot be confirmed from this item.
- The title names Wasmtime sandbox escape flaws fixed in Cranelift.
- No CVE identifiers or version ranges appear in the supplied text.
Impact: Sandbox escape, details not in the supplied text
| Product | Affected |
|---|---|
| Wasmtime | — |
| Cranelift | — |
From the original article
11 min read at socradar.io
Two critical Wasmtime sandbox escape flaws, CVE-2026-115889 and CVE-2026-115893, let a crafted WebAssembly (Wasm) module push the Cranelift compiler into generating unsafe machine code. The Bytecode Alliance fixed both on October 19, 2026, and rated each 9. 9 under CVSS v3.
By Yağmur Ernalbant · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.