GitHub - humodz/node-wasi-preopens-escape: Proof of concept showcasing how a WASM program can access files outside node:wasi's preopens dir.
This repository showcases how to open files outside the "filesystem sandbox" in node:wasi.
The WASI class has a preopens parameter that describes what files the WASM program has access to. Usually, accessing files outside of it results in a "file not found" error, but it's possible to circumvent that if a symlink replaces the file at a very precise moment.
This relies on an outside process to happen and isn't really a problem in practice since most people aren't trying to run malicious code with...
Read more at github.com