CVE-2026-27597

CRITICAL EPSS 54.5%
Published Feb 25, 20264mo ago · Modified Jun 17, 20262w ago
10.0 CVSS 3.1
Critical
Find Similar
Published Feb 25, 2026 4mo ago
Last Modified Jun 17, 2026 2w ago

Description

Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by `@enclave-vm/core`, which can be used to achieve remote code execution (RCE). The issue has been fixed in version 2.11.1.

CVSS Details

Base Score
10.0
Exploitability
3.9
Impact
6.0
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Changed
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
54.5% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-94 Improper Control of Generation of Code (Code Injection) Injection

Affected Products 1

VendorProductVersionRange
agentfrontenclave* <2.11.1

References 2

  • github.com https://github.com/agentfront/enclave/commit/09afbebe4cb6d0586c1145aa71ffabd2103932db
    Patch
  • github.com https://github.com/agentfront/enclave/security/advisories/GHSA-f229-3862-4942
    ExploitMitigationVendor Advisory

Remediation

  • github.com https://github.com/agentfront/enclave/commit/09afbebe4cb6d0586c1145aa71ffabd2103932db
    Patch