CVE-2026-115386 | Bytecode Alliance Wasmtime up to 36.0.16/48.0.3/49.0.1 Wasi P1 fd_readdir information disclosure

October 22, 2026 Yanac

A vulnerability has been found in Bytecode Alliance Wasmtime up to 36.0.16/48.0.3/49.0.1 and classified as problematic. Affected is the function fd_readdir of the component Wasi P1. The manipulation leads to information disclosure.

This vulnerability is referenced as CVE-2026-115386. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More