Vulnerability · Published Jun 1, 2026 · Assigned by VulDB
CVE-2026-10267janet-lang janet debug.c doframe out-of-bounds
Low 3.3
In plain English
A low-severity out-of-bounds read in janet from janet-lang. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).
Severity (CVSS 3.1)3.3Low
Exploit odds (30 days)0.1%top 98.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A security flaw has been discovered in janet-lang janet up to 1.41.0. This affects the function doframe of the file src/core/debug.c. Performing a manipulation results in out-of-bounds read. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The patch is named ed17dd2c5913a23fb1107251e44a9410a3c30cf5.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| janet-lang | janet | 1.01.11.21.31.41.51.61.7 |
Weakness: CWE-125, CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
References
- VDB-367546 | janet-lang janet debug.c doframe out-of-bounds vdb-entry, technical-description
- VDB-367546 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- CVE-2026-10267 | CVE Analysis and Report third-party-advisory
- Submit #825072 | janet-lang janet 1.41.0 Out-of-Bounds Read third-party-advisory
- https://github.com/janet-lang/janet/issues/1743 issue-tracking
- https://github.com/janet-lang/janet/issues/1743#issuecomment-4322129448 issue-tracking
- https://github.com/biniamf/pocs/tree/main/janet-debug-janet-doframe-env-data-oobread exploit
- https://github.com/janet-lang/janet/commit/ed17dd2c5913a23fb1107251e44a9410a3c30cf5 patch
- https://github.com/janet-lang/janet/ product