CVE-2026-46703 Details
Description
Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite allows users to specify the OCI image used by containers in the sandbox. However, when processing tar entries in OCI images, Boxlite does not account for the possibility that entries may be symlinks pointing to absolute paths. An attacker can craft a malicious OCI image and distribute it on image hosting platforms such as DockerHub, tricking users into using it. Once a user loads the malicious image, the attacker can write arbitrary content to any path on the host, which can further lead to remote code execution on the host. This issue has been patched in version 0.9.0.
A critical vulnerability in Boxlite versions prior to 0.9.0 allows for arbitrary file writes on the host system through a symlink escape mechanism. Boxlite, a sandbox service for running untrusted code in lightweight virtual machines, fails to properly validate symlink targets in OCI images. This oversight enables attackers to craft malicious images that, once loaded, can write files to any location on the host. The vulnerability can be exploited to achieve remote code execution by, for example, placing an attacker's public key in the host's authorized_keys file.
Users are advised to upgrade to Boxlite version 0.9.0 or later, as this vulnerability has been patched in that release.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jun 10, 2026CISA-ADP
Assessed Jun 11, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/boxlite-ai/boxlite/security/advisories/GHSA-f396-4rp4-7v2j | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/boxlite-ai/boxlite/releases/tag/v0.9.0 | [email protected] | Release NotesVendor |
| https://github.com/boxlite-ai/boxlite/security/advisories/GHSA-f396-4rp4-7v2j | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Boxlite | < 0.9.0 (semver) |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 11, 2026 | CVE Modified | CISA-ADP |
| Jun 10, 2026 | New CVE Received | [email protected] |