{"id":"ghsa-ghsa-4ch3-9j33-3pmj","seq":2451,"kind":"advisory","title":"Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination","url":"https://github.com/advisories/GHSA-4ch3-9j33-3pmj","permalink":"https://vulnpulse.app/items/ghsa-ghsa-4ch3-9j33-3pmj","summary":"影響: rust:wasmtime-wasi < 24.0.11 → 24.0.11, rust:wasmtime-wasi >= 25.0.0, < 36.0.12 → 36.0.12, rust:wasmtime-wasi >= 37.0.0, < 45.0.3 → 45.0.3, rust:wasmtime-wasi >= 46.0.0, < 46.0.1 → 46.0.1\nSummary Wasmtime's WASI filesystem implementation lets a guest with a read-only source file capability overwrite that file by hard-linking it into another preopen that allows file writes. An attacker who can run a WASI guest can bypass WasiCtxBuilder per-preopen FilePerms and modify host files that were exposed as FilePerms::READ. This attack is possible through the wasip1, wasip2, and wasip3 interfaces to the WASI filesystem. This attack is also possible through an indirection of renaming a ha…","severity":"medium","techs":["rust","wasmtime"],"cves":["CVE-2026-58494"],"tags":["GHSA-4ch3-9j33-3pmj","wasmtime-wasi","wasmtime-wasi","wasmtime-wasi","wasmtime-wasi"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-16T19:57:26.000Z","fetched_at":"2026-10-21T16:17:46.637Z"}