CVE-2026-25533
Unknown Unknown - Not Provided
Bypass Vulnerabilities in Enclave-VM Enable Sandbox Escape

Publication date: 2026-02-06

Last updated on: 2026-02-20

Assigner: GitHub, Inc.

Description
Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.10.1, the existing layers of security in enclave-vm are insufficient: The AST sanitization can be bypassed with dynamic property accesses, the hardening of the error objects does not cover the peculiar behavior or the vm module and the function constructor access prevention can be side-stepped by leveraging host object references. This vulnerability is fixed in 2.10.1.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-06
Last Modified
2026-02-20
Generated
2026-06-16
AI Q&A
2026-02-07
EPSS Evaluated
2026-06-14
NVD
CVE-2026-25533
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
agentfront enclave From 2.7.0 (inc) to 2.10.1 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-835 The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability affects Enclave, a secure JavaScript sandbox used for safe AI agent code execution. Before version 2.10.1, the security measures in enclave-vm were insufficient. Specifically, the AST sanitization could be bypassed using dynamic property accesses, error object hardening did not fully address the vm module's unique behavior, and attempts to prevent function constructor access could be circumvented by exploiting host object references. These weaknesses allowed potential security bypasses within the sandbox environment.

Impact Analysis

This vulnerability could allow attackers to bypass the security restrictions of the Enclave JavaScript sandbox. As a result, malicious code might execute in ways that were intended to be prevented, potentially leading to unauthorized code execution or compromise of the sandbox environment's integrity.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

To mitigate this vulnerability, you should upgrade Enclave to version 2.10.1 or later, where the security issues have been fixed.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-25533. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart