Vulnerabilitymedium
Re: bubblewrap 0.12.0 fixes writes outside sandbox
AI summary · grok-4.7Summaries by Vani AI
Bubblewrap 0.12.0 fixes writes outside the sandbox, tracked as CVE-2026-87766.
Simon McVittie noted on oss-security that CVE-2026-87766 was assigned for a bubblewrap flaw that allowed writes outside the sandbox. Bubblewrap 0.12.0 contains the fix. The message does not report active exploitation.
Key facts
- CVE-2026-87766 covers writes outside the bubblewrap sandbox.
- Bubblewrap 0.12.0 includes the fix.
- No in-the-wild exploitation is mentioned.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-87766 | Symlink-following sandbox escape (arbitrary file write) in bubblewrap before 0.12.0 | 8.8 | <1% |
From the original article
Posted by Simon McVittie on Sep 22 CVE-2026-87766 was assigned. smcv
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.