Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's maintainers say. An attacker would first need a vulnerable Wasmtime build to compile a module they control, and one of the flaws affects only ARM64 systems. Fixed versions were released on
| Source | The Hacker News |
|---|---|
| Fetched | 10/26/2026, 10:14 PM |
| Data | Markdown JSON |
On 10/26/2026, 08:52 PM, The Hacker News published "Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes" (type: Security news). Severity is "Critical" (critical). Related technologies: Wasmtime / Wasmer.