CVE-2026-46695: CWE-284: Improper Access Control in boxlite-ai boxlite
Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite does not restrict the kernel capabilities available inside the container, malicious code can remount the directory in rw mode, thereby gaining write access to that directory. This allows malicious code to perform arbitrary write operations on directories that should be read-only. This issue has been patched in version 0.9.0.
AI Analysis
Technical Summary
Boxlite is a sandbox service for running OCI containers in lightweight virtual machines. Before version 0.9.0, it does not restrict kernel capabilities inside containers, allowing malicious code to remount directories in read-write mode. This improper access control (CWE-284) vulnerability permits unauthorized write access to directories intended to be read-only. The vulnerability has been patched in version 0.9.0.
Potential Impact
An attacker can perform arbitrary write operations on directories that should be read-only, potentially leading to privilege escalation or compromise of container integrity. The CVSS score is 10.0 (critical), indicating network exploitable, no privileges required, no user interaction, with high confidentiality and integrity impact and no availability impact.
Mitigation Recommendations
Upgrade Boxlite to version 0.9.0 or later, where this vulnerability is patched. No other mitigation guidance is provided. Patch status is confirmed by the vendor stating the issue is fixed in 0.9.0.
CVE-2026-46695: CWE-284: Improper Access Control in boxlite-ai boxlite
Description
Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite does not restrict the kernel capabilities available inside the container, malicious code can remount the directory in rw mode, thereby gaining write access to that directory. This allows malicious code to perform arbitrary write operations on directories that should be read-only. This issue has been patched in version 0.9.0.
CVSS v3.1
Score 10.0critical
Affected software
pkg:github/boxlite-ai/boxliteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Boxlite is a sandbox service for running OCI containers in lightweight virtual machines. Before version 0.9.0, it does not restrict kernel capabilities inside containers, allowing malicious code to remount directories in read-write mode. This improper access control (CWE-284) vulnerability permits unauthorized write access to directories intended to be read-only. The vulnerability has been patched in version 0.9.0.
Potential Impact
An attacker can perform arbitrary write operations on directories that should be read-only, potentially leading to privilege escalation or compromise of container integrity. The CVSS score is 10.0 (critical), indicating network exploitable, no privileges required, no user interaction, with high confidentiality and integrity impact and no availability impact.
Mitigation Recommendations
Upgrade Boxlite to version 0.9.0 or later, where this vulnerability is patched. No other mitigation guidance is provided. Patch status is confirmed by the vendor stating the issue is fixed in 0.9.0.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-15T23:26:58.308Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a29e5e331875706499a398b
Added to database: 6/10/2026, 10:32:03 PM
Last enriched: 6/10/2026, 10:45:37 PM
Last updated: 6/11/2026, 2:03:29 AM
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.