CVE-2026-46703: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in boxlite-ai boxlite
Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite allows users to specify the OCI image used by containers in the sandbox. However, when processing tar entries in OCI images, Boxlite does not account for the possibility that entries may be symlinks pointing to absolute paths. An attacker can craft a malicious OCI image and distribute it on image hosting platforms such as DockerHub, tricking users into using it. Once a user loads the malicious image, the attacker can write arbitrary content to any path on the host, which can further lead to remote code execution on the host. This issue has been patched in version 0.9.0.
AI Analysis
Technical Summary
Boxlite is a sandbox service for running OCI containers in lightweight virtual machines. Before version 0.9.0, Boxlite does not properly validate tar entries in OCI images, specifically failing to handle symlinks pointing to absolute paths. An attacker can exploit this by distributing a malicious OCI image that, when loaded by a user, writes arbitrary content to any location on the host filesystem. This can lead to remote code execution on the host. The issue is identified as CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) and has a CVSS 3.1 score of 9.6 (critical). The vulnerability is fixed in Boxlite version 0.9.0.
Potential Impact
Successful exploitation allows an attacker to write arbitrary files anywhere on the host system running Boxlite, potentially leading to remote code execution with the privileges of the Boxlite process. This compromises host integrity and confidentiality.
Mitigation Recommendations
Upgrade Boxlite to version 0.9.0 or later, where this vulnerability is patched. No other mitigation is indicated by the vendor advisory. Users should avoid loading OCI images from untrusted sources until patched.
CVE-2026-46703: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in boxlite-ai boxlite
Description
Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite allows users to specify the OCI image used by containers in the sandbox. However, when processing tar entries in OCI images, Boxlite does not account for the possibility that entries may be symlinks pointing to absolute paths. An attacker can craft a malicious OCI image and distribute it on image hosting platforms such as DockerHub, tricking users into using it. Once a user loads the malicious image, the attacker can write arbitrary content to any path on the host, which can further lead to remote code execution on the host. This issue has been patched in version 0.9.0.
CVSS v3.1
Score 9.6critical
Affected software
pkg:github/boxlite-ai/boxliteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Boxlite is a sandbox service for running OCI containers in lightweight virtual machines. Before version 0.9.0, Boxlite does not properly validate tar entries in OCI images, specifically failing to handle symlinks pointing to absolute paths. An attacker can exploit this by distributing a malicious OCI image that, when loaded by a user, writes arbitrary content to any location on the host filesystem. This can lead to remote code execution on the host. The issue is identified as CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) and has a CVSS 3.1 score of 9.6 (critical). The vulnerability is fixed in Boxlite version 0.9.0.
Potential Impact
Successful exploitation allows an attacker to write arbitrary files anywhere on the host system running Boxlite, potentially leading to remote code execution with the privileges of the Boxlite process. This compromises host integrity and confidentiality.
Mitigation Recommendations
Upgrade Boxlite to version 0.9.0 or later, where this vulnerability is patched. No other mitigation is indicated by the vendor advisory. Users should avoid loading OCI images from untrusted sources until patched.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-15T23:26:58.309Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a29e5e331875706499a3990
Added to database: 6/10/2026, 10:32:03 PM
Last enriched: 6/10/2026, 10:45:32 PM
Last updated: 6/10/2026, 11:50:09 PM
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.