CVE-2026-46703

The record

Boxlite is a sandbox service that allows users to create lightweight virtual machines (Boxes) and launch OCI containers within them to run untrusted code. Prior to version 0.9.0, Boxlite allows users to specify the OCI image used by containers in the sandbox. However, when processing tar entries in OCI images, Boxlite does not account for the possibility that entries may be symlinks pointing to absolute paths. An attacker can craft a malicious OCI image and distribute it on image hosting platforms such as DockerHub, tricking users into using it. Once a user loads the malicious image, the attacker can write arbitrary content to any path on the host, which can further lead to remote code execution on the host. This issue has been patched in version 0.9.0.

Affected packages

Related vulnerabilities

• GHSA-f396-4rp4-7v2j Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host Same vulnerability
• CVE-2026-46695 Boxlite is a sandbox service that allows users to create lightweight virtual machines… Also affects github.com/boxlite-ai/boxlite/sdks/go
• GHSA-g6ww-w5j2-r7x3 BoxLite: Permission Bypass Allows Modification of Read-Only Files Also affects github.com/boxlite-ai/boxlite/sdks/go
• CVE-2026-81163 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… CWE-22
• CVE-2026-112049 Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in… CWE-22
• CVE-2026-112005 WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote… CWE-22
• CVE-2026-61702 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… CWE-22
• CVE-2026-104871 The Angular SSR is a server-rise rendering tool for Angular applications. CWE-22