Home / Vulnerability Intelligence / CVE-2026-27597

CVE-2026-27597 - Vulnerability Analysis

CriticalCVSS: 10.0

Last Updated: February 25, 2026

Enclave - Remote Code Execution

Published: February 25, 2026Updated: February 25, 2026Remote Exploitable

Overview

Enclave < 2.11.1 contains a remote code execution caused by escaping security boundaries in @enclave-vm/core, letting remote attackers execute arbitrary code, exploit requires no special privileges.

Severity & Score

Severity: Critical

CVSS Score: 10.0

EPSS Score: 28.7%(Probability of exploitation in next 30 days)

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to version 2.11.1 or later.

References

Social Media Activity(2 posts)

Offensive Sequence

@offseq

Feb 25, 2026

6a8 CRITICAL RCE: CVE-2026-27597 in agentfront enclave (<2.11.1) allows sandbox escape via code injection (CWE-94). Unauthenticated remote attackers can fully compromise AI workloads. Patch to 2.11.1+ ASAP. https://radar.offseq.com/threat/cve-2026-27597-cwe-94-improper-control-of-generati-c298fcde #OffSeq #CVE202627597 #AIsecurity #infosec

View original post

TheHackerWire

@thehackerwire

Feb 25, 2026

🔴 CVE-2026-27597 - Critical (10) Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by `@enclave-vm/core`, which can be used to achieve remote code execution (RCE). The i... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-27597/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID: CVE-2026-27597
Severity: Critical
CVSS Score: 10.0
Type: undefined
Status: unconfirmed
EPSS: 28.7%
Social Posts: 2

CWE

CWE-94

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS Score

28.7%Probability of exploitation in the next 30 days