Rubygem-Safemode - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/rubygem-safemode/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 20:47:08 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgrubygem-safemode: Sandboxed code execution vulnerability (CVE-2026-107360)https://feed.craftedsignal.io/briefs/2026-11-safemode-sandbox-escape-cve-2026-107360/Thu, 12 Nov 2026 20:47:08 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-safemode-sandbox-escape-cve-2026-107360/The rubygem-safemode library contains a sandbox escape vulnerability where compound assignment expressions are not subjected to Jail allow-list validation, allowing authenticated attackers to execute arbitrary no-argument methods.CVE-2026-107360 is a vulnerability in the rubygem-safemode library where compound assignment expressions within sandboxed code are evaluated without properly mediating method calls through the required Jail allow-list.

Impact

An authenticated attacker who can supply template content can bypass sandbox restrictions. This allows the attacker to invoke arbitrary no-argument methods on objects exposed to the template renderer, potentially leading to unauthorized data disclosure or destructive system operations, such as host deletion.

Recommendation

Audit applications using rubygem-safemode to determine if user-controlled input can influence template rendering.

]]>criticaladvisory