Skip to content
Threat Feed

Tag

Sandbox-Bypass

12 briefs RSS
critical advisory

Denial of Service Vulnerability in nltk PorterStemmer

An algorithmic complexity vulnerability in the nltk PorterStemmer module allows unauthenticated attackers to cause high CPU usage via specially crafted inputs.

nltk +3 vulnerability rce python java sandbox-bypass path-traversal library-vulnerability sandbox-escape +1
4t 1c updated
critical advisory

Authentication Bypass and Privilege Escalation in ArcadeDB

ArcadeDB versions before 26.8.1 contain a vulnerability in the gRPC transaction executor that allows authenticated readers to execute arbitrary JavaScript, leading to server-wide privilege escalation.

ArcadeDB privilege-escalation database-security cve-2026-75843 vulnerability authentication-bypass arbitrary-file-read sandbox-bypass cve-2026-75840 +3
1r 5t 1c
critical advisory

Arbitrary Code Execution in openssl_encrypt Library

The openssl_encrypt library before version 1.4.0 contains a vulnerability in its Whirlpool hash implementation that allows arbitrary code execution via untrusted shared object loading.

openssl_encrypt +1 vulnerability rce python supply-chain library-vulnerability cryptography cve-2026-74876 authentication-bypass +6
1r 8t 1c
critical advisory

Access-Modifier Bypass in Scriban

Scriban versions prior to 7.2.2 contain an access-modifier bypass in TypedObjectAccessor that allows unauthorized modification of private, internal, or init-only CLR object properties via template injection.

Scriban +3 vulnerability dot-net template-injection access-control sandbox-bypass cve-2026-74790 .net denial-of-service +1
3t 1c
high advisory

n8n Git Node Operations Bypass Sandbox Path Restriction

An authenticated n8n user can exploit a path restriction bypass vulnerability within the Git node's fetch, pull, or push-tags operations to access arbitrary local Git repositories and their contents, potentially leading to sensitive data exposure.

n8n +2 vulnerability sandbox-bypass data-exfiltration workflow-automation
3t
high advisory

Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`

A high-severity vulnerability, CVE-2026-49981, in the Twig templating engine allows for a sandbox bypass when the sandbox state changes between renders for a cached `Template` instance, enabling the execution of otherwise restricted filters, tags, and functions in sandboxed contexts.

Twig vulnerability sandbox-bypass web-application rce
2t
high advisory

npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining

A critical command injection vulnerability exists in the `npm:praisonai` package versions >= 1.2.3 and <= 1.7.1, where the `SandboxExecutor`'s `allowedCommands` policy is bypassed by allowing arbitrary shell command chaining after an allowlisted command, leading to remote code execution with the PraisonAI process privileges.

npm:praisonai command-injection npm nodejs sandbox-bypass vulnerability rce server-side
1r 1t
high advisory

Twig Sandbox Bypass via Object Destructuring Assignment (CVE-2026-46639)

A vulnerability in Twig versions 3.24.0 to 3.26.0 (CVE-2026-46639) allows an attacker with write access to a sandboxed Twig template to bypass security policy restrictions by exploiting object-destructuring assignment to read any public property or invoke any public getter on objects passed to the template engine.

twig/twig twig sandbox-bypass cve-2026-46639
1r 1t
critical advisory

OpenClaude Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input

A sandbox bypass vulnerability exists due to the `dangerouslyDisableSandbox` parameter being exposed as part of the BashTool input schema, allowing an untrusted LLM to bypass the sandbox for any command and achieve host-level code execution due to the default `allowUnsandboxedCommands: true` setting.

sandbox-bypass llm code-execution
3r 1t
critical advisory

JetBrains YouTrack RCE via Sandbox Bypass (CVE-2026-33392)

A high privileged user can achieve remote code execution via sandbox bypass in JetBrains YouTrack before version 2025.3.131383, identified as CVE-2026-33392, potentially leading to complete system compromise.

cve-2026-33392 rce jetbrains youtrack sandbox-bypass
2r 1t 1c
critical advisory

Vim Modeline Sandbox Bypass Vulnerability (CVE-2026-34982)

A critical vulnerability in Vim versions prior to 9.2.0276 allows arbitrary OS command execution via a crafted file that bypasses the modeline sandbox due to missing security checks, potentially leading to code execution.

vim modeline sandbox-bypass code-execution cve-2026-34982
3r 1t 1c 1i
critical advisory

OpenClaw Sandbox Bypass via Heartbeat Context Inheritance

A critical vulnerability in the openclaw npm package (<=2026.3.28) allows a heartbeat context inheritance to bypass the sandbox via senderIsOwner escalation, patched in version 2026.3.31.

sandbox-bypass dependency-vulnerability npm
2r