Get the latest tech news
Proof of Concept showcasing WASM program access files outside node:wasi's dir
Proof of concept showcasing how a WASM program can access files outside node:wasi's preopens dir. - humodz/node-wasi-preopens-escape
The WASI class has a preopens parameter that describes what files the WASM program has access to. Importantly, the sandboxing is designed to be implementable even in the presence of outside processes accessing the same filesystem, including renaming, unlinking, and creating new files and directories. Do not rely on node:wasi to run malicious code, as it can access files outside the preopens directory.
Or read this on Hacker News