Skip to content
OpenAdvisories

Package · npm

enclave-vm

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.4
    CVE-2026-25533

    Enclave has a sandbox escape via infinite recursion and error objects

    Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.10.1, the existing layers of security in enclave-vm are insufficient: The AST sanitization can be bypassed with dynamic property accesses, the hardening of the error …

    agentfront enclave enclave-vm @enclave-vm/core npm
  • Critical 10.0
    CVE-2026-22686 Public exploit

    Sandbox Escape via Host Error Prototype Chain in enclave-vm

    Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.7.0, there is a critical sandbox escape vulnerability in enclave-vm that allows untrusted, sandboxed JavaScript code to execute arbitrary code in the host Node.js run…

    agentfront enclave enclave-vm npm