CVE-2026-46695 BoxLite: Permission Bypass in boxlite Allows Modification of Read-Only Files
Attackers can bypass read-only restrictions in BoxLite containers to modify files by exploiting unrestricted kernel capabilities.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-46695?
CVE-2026-46695 is a critical vulnerability in boxlite-ai boxlite, published on 10 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite does not restrict the kernel capabilities available inside the container, malicious code can remount the directory in rw mode, thereby gaining write access to that directory. This allows malicious code to perform arbitrary write operations on directories that should be read-only. This issue has been patched in version 0.9.0.
Weakness: CWE-284
Which versions are affected by CVE-2026-46695?
13 open source packages ship an affected version, including github.com/boxlite-ai/boxlite/sdks/go, boxlite and boxlite-cli.
| Package | Affected | Fixed in |
|---|---|---|
github.com/boxlite-ai/boxlite/sdks/go Go | All versions | 0.9.0 |
github.com/boxlite-ai/boxlite/sdks/go Go | All versions | 0.9.0 |
github.com/boxlite-ai/boxlite/sdks/go Go | All versions | 0.9.0 |
boxlite PyPI | All versions | 0.9.0 |
boxlite PyPI | All versions | 0.9.0 |
boxlite PyPI | All versions | 0.9.0 |
7 more packages
boxlite crates.io | All versions | 0.9.0 |
boxlite crates.io | All versions | 0.9.0 |
boxlite crates.io | From 0.0.0-0 | 0.9.0 |
boxlite-cli crates.io | All versions | 0.9.0 |
boxlite-cli crates.io | All versions | 0.9.0 |
@boxlite-ai/boxlite npm | All versions | 0.9.0 |
@boxlite-ai/boxlite npm | All versions | 0.9.0 |
How do I fix CVE-2026-46695?
Upgrade github.com/boxlite-ai/boxlite/sdks/go to 0.9.0 or later.
Is CVE-2026-46695 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-46695 exists.
Sources
Also known as GHSA-g6ww-w5j2-r7x3, GO-2026-5392, PYSEC-2026-299, RUSTSEC-2026-0147.