Debian/rust-wasmtime: medium 6.5

Wasmtime is a runtime for WebAssembly. Prior to 24.0.11, 36.0.12, 45.0.3, and 46.0.1, wasmtime-wasi hard-link creation and renaming check directory permissions but not matching FilePerms on source and

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: DEBIAN-CVE-2026-58494
• https://security-tracker.debian.org/tracker/CVE-2026-58494

published 2026-07-08T21:16:54Z · modified 2026-10-26T11:47:24.644705488Z · JSON