CVE-2026-48546 Details
Description
KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js vm.runInNewContext() sandbox context in the issue-auto-respond.yml workflow. Attackers can submit a pull request modifying messages.cjs to import arbitrary Node.js modules, bypassing sandbox restrictions and achieving remote code execution with full GitHub Actions runner privileges including access to AUTOMATION_PR_TOKEN.
A sandbox escape vulnerability has been identified in KanaDojo versions prior to 0.1.18. This vulnerability allows attackers to execute arbitrary code by exploiting the explicit inclusion of the global require function into a Node.js vm.runInNewContext() sandbox environment within the issue-auto-respond.yml workflow. By submitting a pull request that modifies messages.cjs to import specific Node.js modules, attackers can bypass sandbox restrictions and achieve remote code execution. This exploitation occurs with full privileges on the GitHub Actions runner, including access to the AUTOMATION_PR_TOKEN.
Users are advised to update to KanaDojo version 0.1.18 or later, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jun 11, 2026CISA-ADP
Assessed Jun 11, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/lingdojo/kana-dojo/commit/31b85a5d7c4b323ddeba3b2dc5e7807558710544 | [email protected] | Source CodeVendor |
| https://github.com/lingdojo/kana-dojo/releases/tag/v0.1.18 | [email protected] | Release NotesVendor |
| https://www.vulncheck.com/advisories/kanadojo-sandbox-escape-rce-via-messages-cjs | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-693 | Protection Mechanism Failure | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| KanaDojo | < 0.1.18 (semver) |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 14, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 11, 2026 | New CVE Received | [email protected] |