What is the CVSS score of CVE-2026-25533?

CVE-2026-25533 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of AI / ML are affected by CVE-2026-25533?

Enclave versions up to 2.10.1 contain a critical infinite loop vulnerability that can cause service disruption and denial of availability.. A patch is available.

Is there a public PoC exploit available for CVE-2026-25533?

Yes, a public proof-of-concept exploit is available for CVE-2026-25533. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-25533?

Within 24 hours: Identify all systems running Enclave versions ≤2.10.1 and assess business criticality. Within 7 days: Apply vendor patch to all non-production environments and conduct validation testing. Within 30 days: Deploy patch to all production systems according to change management procedures, prioritizing high-availability services.

AI / ML CVE-2026-25533

HIGH

Loop with Unreachable Exit Condition (Infinite Loop) (CWE-835)

2026-02-06 security-advisories@github.com

GHSA-x39w-8vm5-5m3p

Denial Of Service RCE AI / ML Enclave

8.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Feb 20, 2026 - 21:06 vuln.today

Public exploit code

Patch released

Feb 20, 2026 - 21:06 nvd

Patch available

CVE Published

Feb 06, 2026 - 22:16 nvd

HIGH 8.8

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

2 npm packages depend on @enclave-vm/core (2 direct, 0 indirect)
9 npm packages depend on enclave-vm (2 direct, 7 indirect)

Ecosystem-wide dependent count for version 2.10.1 and other introduced versions.

DescriptionGitHub Advisory

Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.10.1, the existing layers of security in enclave-vm are insufficient: The AST sanitization can be bypassed with dynamic property accesses, the hardening of the error objects does not cover the peculiar behavior or the vm module and the function constructor access prevention can be side-stepped by leveraging host object references. This vulnerability is fixed in 2.10.1.

AnalysisAI

Enclave versions up to 2.10.1 is affected by loop with unreachable exit condition (infinite loop) (CVSS 8.8).

Technical ContextAI

This vulnerability (CWE-835: Loop with Unreachable Exit Condition (Infinite Loop)) affects Enclave. Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.10.1, the existing layers of security in enclave-vm are insufficient: The AST sanitization can be bypassed with dynamic property accesses, the hardening of the error objects does not cover the peculiar behavior or the vm module and the function constructor access prevention can be side-stepped by leveraging host object references. This vulnerability is fixed in 2.10.1.