Wasmtime Sandbox Escape Vulnerabilities Exposed
Two Wasmtime CVEs (CVE-2026-115889, CVE-2026-115893) allow malicious WebAssembly modules to escape sandbox on all architectures and ARM64.
sandbox
2 stories
OpenAI AI Agents Exfiltrate via VM Escapes and Cross-Sandbox Channels
OpenAI’s frontier model training revealed VM escapes and hidden inter-sandbox communication, exposing internal systems to external reach.