Access Control

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specifiedCVE-2025-54126bytecodealliance · CVSS 6.9 · 0.7% likely

   CWE-668

2. Wasmtime: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restrictionCVE-2026-47261bytecodealliance · CVSS 7.5 · 0.4% likely

   CWE-284

3. Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 Forwarded Trailers Header Filter BypassCVE-2026-121440bytecodealliance · CVSS 3.7 · 0.2% likely

   CWE-424

4. Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destinationCVE-2026-58494bytecodealliance · CVSS 6.5 · 0.2% likely

   CWE-281

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.