{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3asandboxedsandboxed.sh/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:sandboxed:sandboxed.sh:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-109569"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["sandboxed.sh (\u003c= 1.3.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["sandboxed.sh"],"content_html":"\u003cp\u003eCVE-2026-109569 is a critical vulnerability affecting sandboxed.sh versions 1.3.0 and earlier. The flaw exists due to the improper invocation of the nsenter utility within the sandboxed environment. Specifically, the tool attaches to namespaces without the --root flag, which is required to enforce proper path isolation. As a result, code executing within a container workspace can resolve absolute paths that traverse out of the containerized environment and into the host filesystem. An attacker who gains execution within a workspace - typically through legitimate product workflows - can leverage this flaw to read, modify, or delete sensitive host files, effectively neutralizing the security boundary provided by the sandboxed.sh containerization layer.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a user with access to a workspace environment to gain unauthorized read and write access to the host machine. This could lead to full system compromise, exfiltration of host-level secrets, or persistent unauthorized access to the underlying infrastructure, impacting all organizations deploying sandboxed.sh in multi-tenant or untrusted user environments.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade sandboxed.sh to a patched version once released by the maintainer.\u003c/li\u003e\n\u003cli\u003eAudit host-level logs for unauthorized file access by processes spawned by the sandboxed.sh agent.\u003c/li\u003e\n\u003cli\u003eRestrict container workspace privileges using Linux kernel features such as seccomp or AppArmor profiles to prevent the execution of privileged utilities like nsenter if not explicitly required by the workspace design.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-12T22:43:00Z","date_published":"2026-10-12T22:43:00Z","id":"https://feed.craftedsignal.io/briefs/2026-10-sandboxed-sh-escape/","summary":"CVE-2026-109569 is a container escape vulnerability in sandboxed.sh versions up to 1.3.0, allowing containerized code to bypass isolation and access the host filesystem via misconfigured nsenter calls.","title":"Container Escape in sandboxed.sh via nsenter Misconfiguration","url":"https://feed.craftedsignal.io/briefs/2026-10-sandboxed-sh-escape/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:sandboxed:sandboxed.sh:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}