{"data":{"id":"8260af40-904a-4d3f-8f55-cfda6fee144f","title":"CVE-2026-22686: Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.7.0, there is a critical…","summary":"CVE-2026-22686 affects enclave-vm, the sandbox component of Enclave, in versions prior to 2.7.0. When a tool invocation fails, enclave-vm passes a host-side Error object into sandboxed code, and that object keeps its host realm prototype chain. Untrusted code can walk that chain to the host Function constructor and run arbitrary JavaScript in the host Node.js runtime, reaching process.env, the filesystem and the network.","solution":"Fixed in 2.7.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-22686","publishedAt":"2026-01-14T00:15:49.957Z","cveId":"CVE-2026-22686","cweIds":["CWE-94","CWE-693"],"cvssScore":"10","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["enclave-vm@< 2.7.0 (fixed: 2.7.0)"],"affectedPackageNames":["enclave-vm"],"affectedPackageRefs":["npm:enclave-vm"],"affectedVendors":[],"affectedVendorsRaw":["Enclave","enclave-vm"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Enclave VM sandbox escape via host Error object prototype chain","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00753,"epssCheckedAt":"2026-11-04T12:08:33.690Z","kevDateAdded":null,"advisoryAliases":["GHSA-7qm7-455j-5p63"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:21.003Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2026-01-09T02:30:48.402Z","daysToFix":-5,"fixCheckedAt":"2026-10-29T21:42:05.795Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"enclave-vm","fixedVersion":"2.7.0","matchedVersion":"2.7.0","fixReleasedAt":"2026-01-09T02:30:48.402Z","daysToFix":-5,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:42:05.641Z"}]}}