Vulnerability · Published Jun 11, 2026 · Assigned by VulnCheck

CVE-2026-48546KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs

High 7.3

In plain English

A high-severity security flaw in kana-dojo from lingdojo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.5%top 57.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js vm.runInNewContext() sandbox context in the issue-auto-respond.yml workflow. Attackers can submit a pull request modifying messages.cjs to import arbitrary Node.js modules, bypassing sandbox restrictions and achieving remote code execution with full GitHub Actions runner privileges including access to AUTOMATION_PR_TOKEN.

Affected products (as reported)

Vendor	Product	Versions
lingdojo	kana-dojo	0 – before 0.1.18

Weakness: CWE-693 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

References

https://github.com/lingdojo/kana-dojo/releases/tag/v0.1.18 release-notes
https://github.com/lingdojo/kana-dojo/commit/31b85a5d7c4b323ddeba3b2dc5e7807558710544 patch
https://www.vulncheck.com/advisories/kanadojo-sandbox-escape-rce-via-messages-cjs third-party-advisory