CVE-2026-115387 | Bytecode Alliance Wasmtime up to 36.0.15/48.0.2/49.0.0 wasmtime-wasi atim/mtim denial of service

SecurityVulns
Yanac

A vulnerability categorized as problematic has been discovered in Bytecode Alliance Wasmtime up to 36.0.15/48.0.2/49.0.0. This issue affects the function path_filestat_set_times/fd_filestat_set_times/set-times/set-times-at of the component wasmtime-wasi. Executing a manipulation of the argument atim/mtim can lead to denial of service.

This vulnerability is registered as CVE-2026-115387. The attack needs to be launched locally. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More