KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs
CVE-2026-48546

8.5HIGH

Key Information:

Vendor

Lingdojo

Status
Kana-dojo
Vendor
CVE Published:
11 June 2026

What is CVE-2026-48546?

KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js vm.runInNewContext() sandbox context in the issue-auto-respond.yml workflow. Attackers can submit a pull request modifying messages.cjs to import arbitrary Node.js modules, bypassing sandbox restrictions and achieving remote code execution with full GitHub Actions runner privileges including access to AUTOMATION_PR_TOKEN.

Affected Version(s)

kana-dojo 0

References

https://github.com/lingdojo/kana-dojo/releases/tag/v0.1.18
release-notes
https://github.com/lingdojo/kana-dojo/commit/31b85a5d7c4b...
patch
https://www.vulncheck.com/advisories/kanadojo-sandbox-esc...
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Katriel Moses
VulnCheck
.