registry / virtual-machine / 0.7.5

virtual-machine@0.7.5

RISCV Virtual Machine with WASM and Node.js native support

AI Security Review

scanned 4h ago · by lpm-firewall-ai

Explicit CLI mounting exposes host file reads and writes to the VM guest. Path traversal is not constrained to the selected mount directory.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs the CLI with --mount and an untrusted VM disk/kernel.

Impact

An untrusted guest may read or overwrite host-accessible files outside the intended mount.

Mechanism

Guest-controlled path traversal through path.join host bridge.

Rationale

No source evidence indicates malicious install-time behavior or covert exfiltration. However, the explicit host-mount feature has a concrete path-traversal read/write vulnerability.

Evidence

build/cli.jspackage.jsonnative/index.js

Network endpoints1

localhost:4433

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

build/cli.js exposes a host-directory mount to VM input.
setup9PHost joins guest-controlled paths without containment validation.

virtual-machine@0.7.5

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code