{"data":{"id":"b2d9614f-d71a-431c-9de5-f73f20652d30","title":"CVE-2026-25533: Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.10.1, the existing layers…","summary":"CVE-2026-25533 affects Enclave, a secure JavaScript sandbox for AI agent code execution, in versions prior to 2.10.1. The sandbox's existing protections in enclave-vm can be bypassed in three ways: AST sanitization through dynamic property accesses, incomplete hardening of error objects around the vm module, and the function constructor access prevention through host object references. GitHub rates it CVSS 4.0 6.4 (Medium), with a local attack vector and no privileges or user interaction required.","solution":"Fixed in 2.10.1.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-25533","publishedAt":"2026-02-06T22:16:11.450Z","cveId":"CVE-2026-25533","cweIds":["CWE-835"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["enclave-vm@<= 2.7.0","@enclave-vm/core@< 2.10.1 (fixed: 2.10.1)"],"affectedPackageNames":["enclave-vm","@enclave-vm/core"],"affectedPackageRefs":["npm:enclave-vm","npm:@enclave-vm/core"],"affectedVendors":[],"affectedVendorsRaw":["enclave-vm","Enclave secure JavaScript sandbox for AI agent code execution"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Enclave JavaScript sandbox escape through dynamic property access bypass","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00255,"epssCheckedAt":"2026-11-04T12:08:35.508Z","kevDateAdded":null,"advisoryAliases":["GHSA-x39w-8vm5-5m3p"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:50:59.037Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2026-02-03T02:34:43.787Z","daysToFix":-3,"fixCheckedAt":"2026-10-29T21:41:43.874Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@enclave-vm/core","fixedVersion":"2.10.1","matchedVersion":"2.10.1","fixReleasedAt":"2026-02-03T02:34:43.787Z","daysToFix":-3,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:41:43.724Z"}]}}