## Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes

- 種別: news
- 重大度: critical
- 関連技術: wasmtime
- 公開日時: 2026-10-26T11:52:41.000Z
- 情報源: The Hacker News (https://thehackernews.com/2026/10/two-critical-wasmtime-flaws-could-let.html)
- パーマリンク: https://vulnpulse.app/items/thehackernews-f67f5ee9f8e3

Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's maintainers say. An attacker would first need a vulnerable Wasmtime build to compile a module they control, and one of the flaws affects only ARM64 systems. Fixed versions were released on