{"action":"Upgrade enclave-vm to 2.7.0 or later.","affected":[{"fixed":"2.7.0","introduced":"0"}],"component":"enclave-vm","cve_ids":["CVE-2026-22686"],"ecosystem":"npm","epss":0.00753,"exploited":false,"fixed_versions":["2.7.0"],"ghsa_id":"GHSA-7qm7-455j-5p63","id":"tcs_01M5KFAQFZ8DA32G80EPG6ZM9H","modified_at":"2026-02-03T02:56:23.079866Z","published_at":"2026-01-14T16:52:30Z","references":["https://osv.dev/vulnerability/GHSA-7qm7-455j-5p63","https://github.com/agentfront/enclave/security/advisories/GHSA-7qm7-455j-5p63","https://nvd.nist.gov/vuln/detail/CVE-2026-22686","https://github.com/agentfront/enclave/commit/ed8bc438b2cd6e6f0b5f2de321e5be6f0169b5a1","https://github.com/agentfront/enclave"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-7qm7-455j-5p63","url":"https://osv.dev/vulnerability/GHSA-7qm7-455j-5p63"}],"summary":"enclave-vm Vulnerable to Sandbox Escape via Host Error Prototype Chain"}