Skip to content
OpenAdvisories

Product · containerd

runwasi

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-47218

    runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox

    runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes supplied directly in an OCI image layer as a trusted artifact from the precompile-cache path and deseri…

    containerd runwasi