PT-2026-21851 · Unknown+1 · @Enclave-Vm/Core+1

C0Rydoras · Published 2026-02-25 · Updated 2026-05-26 · CVE-2026-27597

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Enclave versions prior to 2.11.1

Description Enclave is a secure JavaScript sandbox used for safe AI agent code execution. A critical security flaw exists in versions prior to 2.11.1, allowing an attacker to escape the sandbox boundaries and achieve remote code execution (RCE) on the underlying host system. This is possible due to the ability to obtain the native Object constructor, allowing access to restricted properties and host functions. Two proof-of-concept exploits are described, one leveraging host memory track when a memory limit is set, and another utilizing Node's nodejs.util.inspect.custom symbol when a memory limit is not set. Successful exploitation results in arbitrary command execution on the host, representing a full system compromise.

Recommendations Upgrade to version 2.11.1 or later immediately.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-27597

GHSA-F229-3862-4942

Affected Products

@Enclave-Vm/Core

Enclave

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27597.json · Exploit
• https://github.com/agentfront/enclave/commit/09afbebe4cb6d0586c1145aa71ffabd2103932db · Patch
• https://github.com/agentfront/enclave/security/advisories/GHSA-f229-3862-4942 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-27597 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f229-3862-4942 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27597 · Security Note
• https://github.com/agentfront/enclave · Note
• https://t.me/cveNotify/153559 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2026555740966588493 · Twitter Post
• https://twitter.com/CVEnew/status/2026641347608818029 · Twitter Post
• https://twitter.com/jelizor/status/2059202279341768816 · Twitter Post
• https://twitter.com/CCBalert/status/2026671659013329177 · Twitter Post
• https://t.me/cveNotify/153095 · Telegram Post
• https://twitter.com/CveTodo/status/2026514543308894530 · Twitter Post
• https://twitter.com/autumn_good_35/status/2026674698827046990 · Twitter Post