Loading...
Skip to main content
GeekWala

RUSTSEC-2026-0269 — Vulnerability in wasmtime — Advisory Details

HIGH

Filesystem sandbox escape when paths or symlinks contain trailing slashes

Published August 20, 2026Updated August 31, 2026Source: osv

Summary

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vqjp-4c8c-hfgg For more information see the GitHub-hosted security advisory.

Advisory Timeline

  • First published August 20, 2026 (53 days ago).
  • Last revised August 31, 2026 — 11 days after initial publication.

Remediation

Upgrade to the fixed version using your package manager.

Cargo
Update wasmtime to 24.0.13 or later
cargo update -p wasmtime --precise 24.0.13

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (1)

Affects 1 ecosystem: crates.io (1).

PackageEcosystemAffectedFixed In
wasmtime
crates.io
All versions24.0.13, 36.0.14, 46.0.3 (+1 more)

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 8.6 score means for each attack dimension.

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
P
Scope
—
Confidentiality
—
Integrity
—
Availability
—

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L

References

Frequently Asked Questions

What is RUSTSEC-2026-0269?
Filesystem sandbox escape when paths or symlinks contain trailing slashes This vulnerability has been assigned a severity rating of HIGH (CVSS score: 8.6/10).
How do I check if my project is affected by RUSTSEC-2026-0269?
RUSTSEC-2026-0269 affects wasmtime. Use GeekWala's free vulnerability scanner to check your dependencies against RUSTSEC-2026-0269 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score
8.6

High exploitability or significant impact. Prioritize remediation within days.

Also Known As

GHSA-vqjp-4c8c-hfgg

Related CVEs

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies