CVE-2026-46695

Summary of verified details: CVE-2026-46695 concerns Boxlite before v0.9.0, where host directories mounted via virtiofs were intended read-only but could be remounted by inside-the-sandbox code to write to host files. Root cause: read_only flag was not enforced at the hypervisor level; the hyperv...