{"data":{"id":"9e1fbf2e-fda2-4746-8bfb-68b256bb8341","title":"GHSA-g6ww-w5j2-r7x3: BoxLite: Permission Bypass Allows Modification of Read-Only Files","summary":"BoxLite, a sandbox service that runs untrusted code in lightweight VMs and OCI containers, enforces its read_only host mounts only by adding the MS_RDONLY flag after the VM starts. Because the container is not restricted in kernel capabilities, malicious code can remount the directory read-write and modify data that should be read-only, potentially reaching code execution on the host.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-g6ww-w5j2-r7x3","publishedAt":"2026-05-21T21:52:51.000Z","cveId":"CVE-2026-46695","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["boxlite-cli@< 0.9.0 (fixed: 0.9.0)","boxlite@< 0.9.0 (fixed: 0.9.0)","github.com/boxlite-ai/boxlite/sdks/go@< 0.9.0 (fixed: 0.9.0)","@boxlite-ai/boxlite@< 0.9.0 (fixed: 0.9.0)","boxlite@< 0.9.0 (fixed: 0.9.0)"],"affectedPackageNames":["boxlite-cli","boxlite","github.com/boxlite-ai/boxlite/sdks/go","@boxlite-ai/boxlite"],"affectedPackageRefs":["pypi:boxlite","npm:@boxlite-ai/boxlite","go:github.com/boxlite-ai/boxlite/sdks/go","cargo:boxlite","cargo:boxlite-cli"],"affectedVendors":[],"affectedVendorsRaw":["BoxLite"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00479,"epssCheckedAt":"2026-10-14T12:12:43.169Z","kevDateAdded":null,"advisoryAliases":["GHSA-g6ww-w5j2-r7x3"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-21T21:52:51.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}