Wasmtime sandbox escape flaws patched in Cranelift
The supplied page text gives no CVEs, versions, or exploitation status for the Cranelift fixes.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #cranelift
Two critical Wasmtime flaws let malicious WebAssembly modules escape the sandbox
CVE-2026-115889 affects every architecture and CVE-2026-115893 only ARM64; fixes landed October 19–20 with no attacks reported.
2