CVE-2026-25533

medium

Description

Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.10.1, the existing layers of security in enclave-vm are insufficient: The AST sanitization can be bypassed with dynamic property accesses, the hardening of the error objects does not cover the peculiar behavior or the vm module and the function constructor access prevention can be side-stepped by leveraging host object references. This vulnerability is fixed in 2.10.1.

References

https://www.staicu.org/publications/usenixSec2023-SandDriller.pdf

https://github.com/agentfront/enclave/security/advisories/GHSA-x39w-8vm5-5m3p

https://github.com/agentfront/enclave/commit/2fcf5da81e7e2578ede6f94cae4f379165426dca

Details

Source: Mitre, NVD

Published: 2026-02-06

Updated: 2026-02-20

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Severity: High

CVSS v4

Base Score: 6.4

Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H

Severity: Medium

EPSS

EPSS: 0.00014