Vulnerabilities

TI-2026-34324 CVE-2026-46695 · GHSA-g6ww-w5j2-r7x3

BoxLite: Permission Bypass in boxlite Allows Modification of Read-Only Files

HIGH 82

Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00289 Published 2026-06-10 Fixed in 0.9.0 CWE-284

TI-2026-34332 CVE-2026-46703 · GHSA-f396-4rp4-7v2j

BoxLite: Path Traversal Vulnerability in boxlite Leads to Arbitrary File Write on the Host

HIGH 76

Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00482 Published 2026-06-10 Fixed in 0.9.0 CWE-22

TI-2026-34801 CVE-2026-47213 · GHSA-xjhv-pp2r-6f82

BoxLite: Timeout Bypass Vulnerability

MEDIUM 62

Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00268 Published 2026-06-10 No fix listed CWE-404

Vulnerabilities

Filters

BoxLite: Permission Bypass in boxlite Allows Modification of Read-Only Files

BoxLite: Path Traversal Vulnerability in boxlite Leads to Arbitrary File Write on the Host

BoxLite: Timeout Bypass Vulnerability