{"id":"CVE-2023-51661","aliases":["GHSA-4mq4-7rw3-vm5j"],"url":"https://o3.security/vulnerability/CVE-2023-51661","summary":"Filesystem sandbox not enforced in wasmer-cli","details":"### Summary\nAs of Wasmer version v4.2.3, Wasm programs can access the filesystem outside of the sandbox.\n\n### Details\nhttps://github.com/wasmerio/wasmer/issues/4267\n\n### PoC\nA minimal Rust program:\n\n```\nfn main() {\n    let f = std::fs::OpenOptions::new()\n        .write(true)\n        .create_new(true)\n        .open(\"abc\")\n        .unwrap();\n}\n```\n\nThis should be compiled with `cargo build --target wasm32-wasi`. The compiled program, when run with wasmer WITHOUT `--dir`, can still create a file in the working directory.\n\n### Impact\nService providers running untrusted Wasm code on Wasmer can unexpectedly expose the host filesystem.","published":"2023-12-22T14:54:23.103Z","modified":"2026-08-12T03:51:43.193495710Z","cvss":{"score":8.4,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"crates.io","name":"wasmer-cli","fixedVersion":"4.2.4"}],"fix":{"url":"https://github.com/wasmerio/wasmer/commit/4d63febf9d8b257b0531963b85df48d45d0dbf3c","label":"wasmerio/wasmer@4d63feb"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/51xxx/CVE-2023-51661.json"},{"type":"ADVISORY","url":"https://github.com/wasmerio/wasmer/security/advisories/GHSA-4mq4-7rw3-vm5j"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-51661"},{"type":"REPORT","url":"https://github.com/wasmerio/wasmer/issues/4267"},{"type":"FIX","url":"https://github.com/wasmerio/wasmer/commit/4d63febf9d8b257b0531963b85df48d45d0dbf3c"},{"type":"WEB","url":"https://github.com/wasmerio/wasmer/commit/e3923612c23123025c26f982d390e34df7df030f"},{"type":"PACKAGE","url":"https://github.com/wasmerio/wasmer"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-12T03:51:43.193495710Z"}}