Skip to content
OpenAdvisories

Package · npm

@enclave-vm/core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-27597 Public exploit

    @enclave-vm/core is vulnerable to Sandbox Escape

    Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by `@enclave-vm/core`, which can be used to achieve remote code execution (RCE). The issue has bee…

    agentfront enclave @enclave-vm/core npm