crates.io/boxlite CVE-2026-46695: critical 10, EPSS 0.29%

Read-only volume remount bypass via guest CAP_SYS_ADMIN

Action: Upgrade boxlite to 0.9.0 or later.

cargo update -p boxlite --precise 0.9.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2026-0147
• https://crates.io/crates/boxlite
• https://rustsec.org/advisories/RUSTSEC-2026-0147.html
• https://github.com/boxlite-ai/boxlite/pull/454

CVE-2026-46695 · published 2026-05-16T12:00:00Z · modified 2026-10-12T18:00:13.061473890Z · JSON