CVE-2026-22686

Enclave VM Sandbox Escape CTF Challenge Challenge: "Breaking the Walls" Difficulty: Hard Category: Source Code Review / Sandbox Escape Points: 500 Scenario You've discovered a mysterious sandboxed JavaScript execution environment...

CVE-2026-27597

CVE-2026-27597 - version Remote Code Execution Quick Usage python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 10.0 Impact: Confidentiality, Integrity, Availability Published: 2026-02-25 Technical Summary Enclave is a secure...

CVE-2026-22686-RemoteCodeExecution-RCE-PoC

CVE-2026-22686 — enclave-vm Sandbox Escape PoC A proof-of-concept PoC exploit and payload generator for CVE-2026-22686 , a critical sandbox escape vulnerability in enclave-vm versions prior to 2.7.0 , allowing arbitrary code execution within the host Node.js runtime. ⚠️ Disclaimer : This tool is...

Node.js Module @enclave-vm/core < 2.11.0 RCE

The version of the @enclave-vm/core Node.js module installed on the remote host is prior to 2.11.0. It is, therefore, affected by a remote code execution vulnerability: - It is possible to escape the security boundaries of the sandbox, which can be used to achieve remote code execution...

@enclave-vm/core is vulnerable to Sandbox Escape

Summary It is possible to escape the security boundraries set by @enclave-vm/core, which can be used to achieve remote code execution RCE. The issue has been fixed in version 2.11.1. --- Details It is possible to obtain the native Object constructor instead of the SafeObject wrapper. This can be...

Arbitrary Code Injection

Overview @enclave-vm/ast is a production-ready, extensible AST validator for JavaScript with rule-based validation Affected versions of this package are vulnerable to Arbitrary Code Injection by escaping the enclave sandbox. An attacker can pollute the Object constructor rather than the intended...

@enclave-vm/broker (>=2.8.0, <=2.10.1), @enclave-vm/core (>=2.8.0, <=2.10.1) +1 more potentially affected by CVE-2026-27597 via @enclave-vm/ast (>=2.8.0, <=2.10.1)

@enclave-vm/ast NPM version =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.10.1 Source cves: CVE-2026-27597 Source advisory: SNYK:JS-ENCLAVEVMAST-15366962...

@enclave-vm/broker (>=2.8.0, <=2.11.0), @enclave-vm/runtime (>=2.8.0, <=2.11.0) potentially affected by CVE-2026-27597 via @enclave-vm/core (>=2.8.0, <=2.11.0)

@enclave-vm/core NPM version =2.8.0, =2.8.0, =2.8.0, =2.11.0 Source cves: CVE-2026-27597 Source advisory: OSV:GHSA-F229-3862-4942...

@enclave-vm/broker (>=2.8.0, <=2.10.1), @enclave-vm/runtime (>=2.8.0, <=2.10.1) potentially affected by CVE-2026-27597 via @enclave-vm/core (>=2.8.0, <=2.10.1)

@enclave-vm/core NPM version =2.8.0, =2.8.0, =2.8.0, =2.10.1 Source cves: CVE-2026-27597 Source advisory: GHSA-F229-3862-4942...

@enclave-vm/broker (>=0.0.1, <=2.11.0), @enclave-vm/runtime (>=0.0.1, <=2.11.0) potentially affected by CVE-2026-27597 via @enclave-vm/core (>=0.0.1, <=2.11.0)

@enclave-vm/core NPM version =0.0.1, =0.0.1, =0.0.1, =2.11.0 Source cves: CVE-2026-27597 Source advisory: MEND:CVE-2026-27597...

CVE-2026-27597 @enclave-vm/core is vulnerable to Sandbox Escape

Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by @enclave-vm/core, which can be used to achieve remote code execution RCE. The issue has been fixed in version 2.11.1...

CVE-2026-27597

Summary: CVE-2026-27597 affects Enclave’s secure JavaScript sandbox with a vulnerability in the @enclave-vm/core boundaries prior to 2.11.1, allowing an attacker to escape the sandbox and achieve remote code execution. The issue is mitigated by upgrading to version 2.11.1, where the boundary esca...

CVE-2026-27597: Improper Control of Generation of Code

Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by @enclave-vm/core, which can be used to achieve remote code execution RCE. The issue has been fixed in version 2.11.1...

@enclave-vm/broker (>=0.0.1, <=2.10.0), @enclave-vm/runtime (>=0.0.1, <=2.10.0) potentially affected by CVE-2026-25533 via @enclave-vm/core (>=0.0.1, <=2.10.0)

@enclave-vm/core NPM version =0.0.1, =0.0.1, =0.0.1, =2.10.0 Source cves: CVE-2026-25533 Source advisory: MEND:CVE-2026-25533...

CVE-2026-25533: Loop with Unreachable Exit Condition

Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.10.1, the existing layers of security in enclave-vm are insufficient: The AST sanitization can be bypassed with dynamic property accesses, the hardening of the error objects does not cover the peculiar...

@enclave-vm/broker (>=2.8.0, <=2.10.0), @enclave-vm/runtime (>=2.8.0, <=2.10.0) potentially affected by CVE-2026-25533 via @enclave-vm/core (>=2.8.0, <=2.10.0)

@enclave-vm/core NPM version =2.8.0, =2.8.0, =2.8.0, =2.10.0 Source cves: CVE-2026-25533 Source advisory: GHSA-X39W-8VM5-5M3P...

@frontmcp/adapters (>=0.7.1, <=0.8.0), @frontmcp/plugin-approval (>=0.7.1, <=0.8.0) +7 more potentially affected by CVE-2026-25533 via enclave-vm (2.7.0)

enclave-vm NPM version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on enclave-vm and may be impacted: - @frontmcp/adapters =0.7.1, =0.7.1, =0.7.1, =0.7.1, =0.7.1, =0.7.1, =0.7.1, =0.7.1, =0.7.1, =0.8.0 Source cves: CVE-2026-25533 Source advisory...

@frontmcp/adapters (>=0.5.0, <=0.8.0), @frontmcp/plugin-approval (>=0.7.1, <=0.8.0) +9 more potentially affected by CVE-2026-25533 via enclave-vm (>=1.0.3, <=2.7.0)

enclave-vm NPM version =1.0.3, =0.5.0, =0.7.1, =0.7.1, =0.7.1, =0.7.1, =0.7.1, =0.5.0, =0.5.0, =0.5.0, =0.6.1, =0.8.0 - frontmcp 0.5.0 Source cves: CVE-2026-25533 Source advisory: SNYK:JS-ENCLAVEVM-15248348...

@enclave-vm/broker (>=2.8.0, <=2.10.0), @enclave-vm/runtime (>=2.8.0, <=2.10.0) potentially affected by CVE-2026-25533 via @enclave-vm/core (>=2.8.0, <=2.10.0)

@enclave-vm/core NPM version =2.8.0, =2.8.0, =2.8.0, =2.10.0 Source cves: CVE-2026-25533 Source advisory: SNYK:JS-ENCLAVEVMCORE-15248347...

Infinite loop

Overview @enclave-vm/core is a Sandbox runtime for secure JavaScript code execution Affected versions of this package are vulnerable to Infinite loop via infinite recursion in the vm module. An attacker can execute arbitrary code outside the intended sandbox by crafting recursive calls that explo...