{"metadata": {"vulnerability": "CVE-2026-108759", "count": 14, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-10T00:00:00Z", "date_only": false, "value": "2026-10-10T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-108759", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-11T01:57:28.334Z", "date_only": false, "value": "2026-10-11T01:57:28.334Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-108759", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-11T12:19:56.496Z", "date_only": false, "value": "2026-10-11T12:19:56.496Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-108759", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-11T12:19:56.496Z", "date_only": false, "value": "2026-10-11T12:19:56.496Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-108759", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-11T13:09:34.884Z", "date_only": false, "value": "2026-10-11T13:09:34.884563Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117422435491233997", "record": "CVE-2026-108759", "field": "creation_timestamp", "uuid": "63c53e0d-f1fe-4c54-9501-0a2c15c39838", "content": "CVE-2026-108759 mistral.rs 0.9.0 through 0.9.4 Sandbox Escape via Symlink Following in mistralrs-code-exec mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symlinks as outputs or reuse sessions with symlinked input paths to access files with the server process's permissions.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108759https://hackmd.io/@haind03/ericlbuehler-mistralrs-code-exec-output-symlink-sandbox-escapehttps://github.com/EricLBuehler/mistral.rs/blob/4400935451da5e2dc7379a3f92fbbada66557f6c/mistralrs-code-exec/src/files.rs#L241-L254https://github.com/EricLBuehler/mistral.rs/blob/4400935451da5e2dc7379a3f92fbbada66557f6c/mistralrs-code-exec/src/mount.rs#L30-L50https://github.com/EricLBuehler/mistral.rshttps://www.vulncheck.com/advisories/mistral-rs-0.9.0-through-0.9.4-sandbox-escape-via-symlink-following-in-mistralrs-code-exec#EricLBuehler #mistral.rs#CVE_2026_108759#bot", "url": "https://infosec.exchange/users/cve/statuses/117422435491233997"}, {"timestamp": "2026-10-11T13:17:21Z", "date_only": false, "value": "2026-10-11T13:17:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FJJM-5MGR-R8VP", "record": "GHSA-FJJM-5MGR-R8VP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-11T13:17:21.167Z", "date_only": false, "value": "2026-10-11T13:17:21.167", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108759", "record": "FKIE_CVE-2026-108759", "field": "published"}, {"timestamp": "2026-10-11T15:31:06Z", "date_only": false, "value": "2026-10-11T15:31:06Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FJJM-5MGR-R8VP", "record": "GHSA-FJJM-5MGR-R8VP", "field": "published"}, {"timestamp": "2026-10-11T15:31:06Z", "date_only": false, "value": "2026-10-11T15:31:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FJJM-5MGR-R8VP", "record": "GHSA-FJJM-5MGR-R8VP", "field": "modified"}, {"timestamp": "2026-10-18T11:33:39.602Z", "date_only": false, "value": "2026-10-18T11:33:39.602701Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-108759", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-18T11:33:39.602Z", "date_only": false, "value": "2026-10-18T11:33:39.602701Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108759", "record": "FKIE_CVE-2026-108759", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-18T11:53:05.908Z", "date_only": false, "value": "2026-10-18T11:53:05.908Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-108759", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-18T11:53:05.908Z", "date_only": false, "value": "2026-10-18T11:53:05.908Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-108759", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-18T12:17:01.270Z", "date_only": false, "value": "2026-10-18T12:17:01.270", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108759", "record": "FKIE_CVE-2026-108759", "field": "lastModified"}]}