Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching FilePerms on source and destination preopens, allowing a WASI guest with a read-only source file capability to overwrite host files exposed as FilePerms::READ through wasip1, wasip2, or wasip3 filesystem interfaces. This issue is fixed in versions 24.0.11, 36.0.12, 45.0.3, and 46.0.1.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-
    link creation and renaming check directory permissions but not matching FilePerms on source and
    destination preopens, allowing a WASI guest with a read-only source file capability to overwrite host
    files exposed as FilePerms::READ through wasip1, wasip2, or wasip3 filesystem interfaces. This issue is
    fixed in versions 24.0.11, 36.0.12, 45.0.3, and 46.0.1. (CVE-2026-58494)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-     link creation and renaming check directory permissions but not matching FilePerms on source and     destination preopens, allowing a WASI guest with a read-only source file capability to overwrite host     files exposed as FilePerms::READ through wasip1, wasip2, or wasip3 filesystem interfaces. This issue is     fixed in versions 24.0.11, 36.0.12, 45.0.3, and 46.0.1. (CVE-2026-58494)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
476172	Chainguard: wizer: security update to 11.0.3-r20	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
476172	Chainguard: wizer: security update to 11.0.3-r20	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
325954	Linux Distros Unpatched Vulnerability : CVE-2026-58494	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-58494

medium

Tenable Plugins

medium

medium

medium