## Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

- 種別: advisory
- 重大度: medium
- 関連技術: rust, wasmtime
- CVE: CVE-2026-58494
- 公開日時: 2026-10-16T19:57:26.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-4ch3-9j33-3pmj)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-4ch3-9j33-3pmj

影響: rust:wasmtime-wasi < 24.0.11 → 24.0.11, rust:wasmtime-wasi >= 25.0.0, < 36.0.12 → 36.0.12, rust:wasmtime-wasi >= 37.0.0, < 45.0.3 → 45.0.3, rust:wasmtime-wasi >= 46.0.0, < 46.0.1 → 46.0.1
Summary Wasmtime's WASI filesystem implementation lets a guest with a read-only source file capability overwrite that file by hard-linking it into another preopen that allows file writes. An attacker who can run a WASI guest can bypass WasiCtxBuilder per-preopen FilePerms and modify host files that were exposed as FilePerms::READ. This attack is possible through the wasip1, wasip2, and wasip3 interfaces to the WASI filesystem. This attack is also possible through an indirection of renaming a ha…