boxlite vulnerabilities

2 known vulnerabilities in boxlite from Boxlite-ai. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  boxlite: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-46703Jun 10, 2026Boxlite-ai

  Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite allows users to specify the OCI image used by containers in the sandbox.

• 10.0 Critical severity

  boxlite: Improper Access Control

  CVE-2026-46695Jun 10, 2026Boxlite-ai

  Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite does not restrict the kernel capabilities available inside the container,