PT-2026-56584

Name of the Vulnerable Software and Affected Versions Wasmtime versions prior to 24.0.11 Wasmtime versions prior to 36.0.12 Wasmtime versions prior to 45.0.3 Wasmtime versions prior to 46.0.1 Description In the wasmtime-wasi component, hard-link creation and renaming processes verify directory...

CVE-2026-47261

Wasmtime is a runtime for WebAssembly. In versions prior to 24.0.9, 36.0.10, and 44.0.2, when a filesystem preopen is given DirPerms::all and FilePerms::READ without FilePerms::WRITE, this access control mechanism can be bypassed via the wasip2 descriptor.open-at or wasip1 pathopen interfaces by...