Skip to content
OpenAdvisories

Package · crates.io

boxlite-cli

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 10.0
    CVE-2026-46695

    BoxLite: Permission Bypass in boxlite Allows Modification of Read-Only Files

    Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite does not restrict the kernel capabilities available inside the container…

    boxlite-ai boxlite boxlite boxlite-cli npm PyPI Go crates.io
  • Critical 9.6
    CVE-2026-46703

    BoxLite: Path Traversal Vulnerability in boxlite Leads to Arbitrary File Write on the Host

    Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite allows users to specify the OCI image used by containers in the sandbox.…

    boxlite-ai boxlite boxlite boxlite-cli npm PyPI Go crates.io