Skyvern (< 1.0.45)

A sandbox escape vulnerability in Skyvern prior to version 1.0.45 allows unauthenticated attackers to achieve remote code execution by injecting malicious Jinja2 templates into prompt inputs.