CyberSecBulletin

Boxlite-ai vulnerabilities

We track 2 vulnerabilities in Boxlite-ai products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 10, 2026.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Boxlite-ai vulnerabilities

  • 9.6 Critical severity

    boxlite: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-46703Boxlite-ai

    Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite allows users to specify the OCI image used by containers in the sandbox.

  • 10.0 Critical severity

    boxlite: Improper Access Control

    CVE-2026-46695Boxlite-ai

    Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite does not restrict the kernel capabilities available inside the container,