wasmtimewasi File Permission Bypass via Hardlink/Rename

github.com 2026-07-09查看中文 →

Security AdvisoryMediumBytecode Alliance

Affected:

wasmtimewasi < 24.0.11
wasmtimewasi >= 25.0.0 and < 36.0.12
wasmtimewasi >= 37.0.0 and < 45.0.3
wasmtimewasi 46.0.0

Fixed in:

wasmtimewasi 24.0.11
wasmtimewasi 36.0.12
wasmtimewasi 45.0.3
wasmtimewasi 46.0.1

Referenced CVEs: CVE-2026-58494 · 6.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

CVE-2026-48031: Go REST API Boilerplate JWT Hardcoded Key Authentication Bypass 2026-08-04 Fix for Hardcoded Weak JWT Secret Bypassing Auth 2026-08-04 CVE-2026-4031: go-base Hardcoded JWT Secret "random" Allows Token Forgery with POC 2026-08-04 Oasit Default HTML Error Handler XSS Vulnerability and Fix 2026-08-04 Emlog Pro 2.6.23 Improper Certificate Validation in HTTP Client Enables Credential Theft via MITM 2026-08-04

Offline Archive

Offline screenshot & PDF are Pro-exclusive