@enclave-vm/broker (>=2.8.0, <=2.10.1), @enclave-vm/core (>=2.8.0, <=2.10.1) +1 more potentially affected by CVE-2026-27597 via @enclave-vm/ast (>=2.8.0, <=2.10.1)

@enclave-vm/ast NPM version =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.10.1 Source cves: CVE-2026-27597 Source advisory: SNYK:JS-ENCLAVEVMAST-15366962...

@enclave-vm/broker (>=2.8.0, <=2.11.0), @enclave-vm/runtime (>=2.8.0, <=2.11.0) potentially affected by CVE-2026-27597 via @enclave-vm/core (>=2.8.0, <=2.11.0)

@enclave-vm/core NPM version =2.8.0, =2.8.0, =2.8.0, =2.11.0 Source cves: CVE-2026-27597 Source advisory: OSV:GHSA-F229-3862-4942...

CVE-2026-27597

Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by @enclave-vm/core, which can be used to achieve remote code execution RCE. The issue has been fixed in version 2.11.1...

CVE-2026-27597 @enclave-vm/core is vulnerable to Sandbox Escape

Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by @enclave-vm/core, which can be used to achieve remote code execution RCE. The issue has been fixed in version 2.11.1...

CVE-2026-27597

Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by @enclave-vm/core, which can be used to achieve remote code execution RCE. The issue has been fixed in version 2.11.1...