CVE-2026-46695

Affected versions of the boxlite package are vulnerable to Improper Access Control due to the read_only mount flag not being propagated to the virtiofs hypervisor configuration. In boxlite/src/vmm/krun/engine.rs the Krun::create() loop logs share.read_only as ro or rw but invokes ctx.add_virtiofs() with only the share tag and host path, and the underlying FFI in boxlite/src/vmm/krun/context.rs accepts no read-only parameter, so the MS_RDONLY enforcement applied after VM start can be removed by a guest that retains the kernel capabilities required to remount the share. Malicious code executing inside the sandbox can remount a directory advertised as read-only in read-write mode and tamper with host files such as credentials, virtual environments, or user code, leading to code execution on the host.