Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes

Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project's maintainers say. An attacker would first need a vulnerable Wasmtime build to compile a module they control, and one of the flaws affects only ARM64 systems. Fixed versions were released on

在 The Hacker News 阅读

2026/10/26 20:52，The Hacker News 发布了“Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes”（类型：安全新闻）。严重程度为“严重”（critical）。相关技术：Wasmtime / Wasmer。