Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
CVE-2026-47218: runwasi prior to 0.6.1 lets crafted image run native code
CVE-2026-47218 · published 3 days ago
Summary
The runwasi component used with the container runtime can treat a specially prepared container image as safe and load it as native code. This lets an attacker bypass the normal WebAssembly checks and run code that has the same permissions as the container, such as access to the filesystem and network. Upgrade runwasi to version 0.6.1 or newer to stop the problem.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| containerd | runwasi | < 0.6.1 |
Original advisory text
runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox
runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes supplied directly in an OCI image layer as a trusted artifact from the precompile-cache path and deserialize them as native code. An attacker who causes a victim to run a crafted image can bypass WebAssembly validation and execute native code in the shim zygote process, gaining the filesystem, environment, credentials, networking, and Linux syscall access available to the workload container. Downstream shims built with runwasi's containerd-shim-wasm precompile-cache API are also affected if they implement Compiler and trust executable precompiled artifacts from OCI image layers; the 0.6.1 boundary applies specifically to containerd-shim-wasmtime and does not independently certify downstream product releases. The flaw escapes the WASI sandbox to the workload container boundary, but it does not by itself bypass container isolation or provide direct host code execution. This issue is fixed in version 0.6.1.
References
- https://github.com/containerd/runwasi/commit/d28ab73c2c8a6c50d1927078821bd418b9e... Patch
- https://github.com/containerd/runwasi/releases/tag/containerd-shim-wasmtime/v0.6... URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47218... Vendor Advisory
- https://github.com/containerd/runwasi/security/advisories/GHSA-cc25-vq59-rcjx Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-47218 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Severity
9.9
Critical
Type
CWE-502Deserialization of Untrusted Data
Timeline
Published15 Oct 2026
Updated17 Oct 2026
First seen15 Oct 2026
Track software like this
Free during beta