CVE-2026-22686

Enclave VM 샌드박스 탈출 CTF 챌린지 챌린지: "벽을 부수다" 난이도: 하드 카테고리: 소스 코드 리뷰 / 샌드박스 탈출 포인트: 500 시나리오 당신은 신비한 샌드박스 JavaScript 실행 환경을 발견했습니다...

CVE-2026-27597

CVE-2026-27597 - 버전 원격 코드 실행 빠른 사용법 python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe 악용 참고 사항 심각도: CRITICAL CVSS: 10.0 영향: 기밀성, 무결성, 가용성 게시일: 2026-02-25 기술 요약 Enclave는 안전한 AI 에이전트 코드 실행을 위해 설계된 보안 JavaScript 샌드박스입니다. 버전 2.11.1 이전에는 @enclave-vm/core에 의해 설정된 보안 경계를 우회할...

CVE-2026-22686-RemoteCodeExecution-RCE-PoC

CVE-2026-22686 — enclave-vm 샌드박스 탈출 PoC CVE-2026-22686 에 대한 개념 증명PoC 익스플로잇 및 페이로드 생성기입니다. 이 취약점은 enclave-vm 2.7.0 이전 버전에 존재하는 치명적인 샌드박스 탈출 취약점으로, 호스트 Node.js 런타임 내에서 임의 코드 실행을 가능하게 합니다. ⚠️ 면책 조항 : 이 도구는 교육 및 승인된 보안 테스트 목적으로만 제공됩니다. 사전 서면 동의 없이 시스템에 사용하는 것은 불법입니다. 작성자는 어떠한 오용에 대해서도 책임을 지지 않습니다. 📖 목...

Node.js Module @enclave-vm/core < 2.11.0 RCE

The version of the @enclave-vm/core Node.js module installed on the remote host is prior to 2.11.0. It is, therefore, affected by a remote code execution vulnerability: - It is possible to escape the security boundaries of the sandbox, which can be used to achieve remote code execution...

@enclave-vm/broker (>=2.8.0, <=2.10.1), @enclave-vm/core (>=2.8.0, <=2.10.1) +1 more potentially affected by CVE-2026-27597 via @enclave-vm/ast (>=2.8.0, <=2.10.1)

@enclave-vm/ast NPM version =2.8.0, =2.8.0, =2.8.0, =2.8.0, =2.10.1 Source cves: CVE-2026-27597 Source advisory: SNYK:JS-ENCLAVEVMAST-15366962...

Arbitrary Code Injection

Overview @enclave-vm/ast is a production-ready, extensible AST validator for JavaScript with rule-based validation Affected versions of this package are vulnerable to Arbitrary Code Injection by escaping the enclave sandbox. An attacker can pollute the Object constructor rather than the intended...

@enclave-vm/broker (>=2.8.0, <=2.11.0), @enclave-vm/runtime (>=2.8.0, <=2.11.0) potentially affected by CVE-2026-27597 via @enclave-vm/core (>=2.8.0, <=2.11.0)

@enclave-vm/core NPM version =2.8.0, =2.8.0, =2.8.0, =2.11.0 Source cves: CVE-2026-27597 Source advisory: OSV:GHSA-F229-3862-4942...

@enclave-vm/core is vulnerable to Sandbox Escape

Summary It is possible to escape the security boundraries set by @enclave-vm/core, which can be used to achieve remote code execution RCE. The issue has been fixed in version 2.11.1. --- Details It is possible to obtain the native Object constructor instead of the SafeObject wrapper. This can be...

CVE-2026-27597 @enclave-vm/core is vulnerable to Sandbox Escape

Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by @enclave-vm/core, which can be used to achieve remote code execution RCE. The issue has been fixed in version 2.11.1...

CVE-2026-27597

Summary: CVE-2026-27597 affects Enclave’s secure JavaScript sandbox with a vulnerability in the @enclave-vm/core boundaries prior to 2.11.1, allowing an attacker to escape the sandbox and achieve remote code execution. The issue is mitigated by upgrading to version 2.11.1, where the boundary esca...

CVE-2026-27597: Improper Control of Generation of Code

Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by @enclave-vm/core, which can be used to achieve remote code execution RCE. The issue has been fixed in version 2.11.1...

CVE-2026-25533: Loop with Unreachable Exit Condition

Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.10.1, the existing layers of security in enclave-vm are insufficient: The AST sanitization can be bypassed with dynamic property accesses, the hardening of the error objects does not cover the peculiar...

@frontmcp/adapters (>=0.5.0, <=0.8.0), @frontmcp/plugin-approval (>=0.7.1, <=0.8.0) +9 more potentially affected by CVE-2026-25533 via enclave-vm (>=1.0.3, <=2.7.0)

enclave-vm NPM version =1.0.3, =0.5.0, =0.7.1, =0.7.1, =0.7.1, =0.7.1, =0.7.1, =0.5.0, =0.5.0, =0.5.0, =0.6.1, =0.8.0 - frontmcp 0.5.0 Source cves: CVE-2026-25533 Source advisory: SNYK:JS-ENCLAVEVM-15248348...

Infinite loop

Overview @enclave-vm/core is a Sandbox runtime for secure JavaScript code execution Affected versions of this package are vulnerable to Infinite loop via infinite recursion in the vm module. An attacker can execute arbitrary code outside the intended sandbox by crafting recursive calls that explo...

@enclave-vm/broker (>=2.8.0, <=2.10.0), @enclave-vm/runtime (>=2.8.0, <=2.10.0) potentially affected by CVE-2026-25533 via @enclave-vm/core (>=2.8.0, <=2.10.0)

@enclave-vm/core NPM version =2.8.0, =2.8.0, =2.8.0, =2.10.0 Source cves: CVE-2026-25533 Source advisory: SNYK:JS-ENCLAVEVMCORE-15248347...

Infinite loop

Overview enclave-vm is a Sandbox runtime for secure JavaScript code execution Affected versions of this package are vulnerable to Infinite loop via infinite recursion in the vm module. An attacker can execute arbitrary code outside the intended sandbox by crafting recursive calls that exploit hos...

Sandbox escape via infinite recursion and error objects

Note: The npm package has moved to @enclave-vm/core formerly enclave-vm. All fixed versions and guidance refer to @enclave-vm/core. Summary The existing layers of security in enclave-vm are insufficient: The AST sanitization can be bypassed with dynamic property accesses, the hardening of the err...

@enclave-vm/broker (>=2.8.0, <=2.10.0), @enclave-vm/runtime (>=2.8.0, <=2.10.0) potentially affected by CVE-2026-25533 via @enclave-vm/core (>=2.8.0, <=2.10.0)

@enclave-vm/core NPM version =2.8.0, =2.8.0, =2.8.0, =2.10.0 Source cves: CVE-2026-25533 Source advisory: OSV:GHSA-X39W-8VM5-5M3P...

PT-2026-6649

Name of the Vulnerable Software and Affected Versions enclave-vm versions prior to 2.10.1 @enclave-vm/core versions prior to 2.10.1 Description The security measures within enclave-vm are inadequate. The Abstract Syntax Tree AST sanitization can be circumvented using dynamic property accesses. Th...

CVE-2026-22686

Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.7.0, there is a critical sandbox escape vulnerability in enclave-vm that allows untrusted, sandboxed JavaScript code to execute arbitrary code in the host Node.js runtime. When a tool invocation fails,...