Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes

Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's maintainers say. An attacker would first need a vulnerable Wasmtime build to compile a module they control, and one of the flaws affects only ARM64 systems. Fixed versions were released on

The Hacker News에서 읽기

2026. 10. 26. 오후 08:52, The Hacker News에서 "Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes"을(를) 게시했습니다 (유형: 보안 뉴스). 심각도는 "긴급"(critical)입니다. 관련 기술: Wasmtime / Wasmer.