Tag

Sandbox-Bypass

3 briefs RSS

JetBrains YouTrack RCE via Sandbox Bypass (CVE-2026-33392)

A high privileged user can achieve remote code execution via sandbox bypass in JetBrains YouTrack before version 2025.3.131383, identified as CVE-2026-33392, potentially leading to complete system compromise.

cve-2026-33392 rce jetbrains youtrack sandbox-bypass

2r 1t 1c 2w ago

critical advisory

Vim Modeline Sandbox Bypass Vulnerability (CVE-2026-34982)

3 rules 1 TTP 1 CVE 5 IOCs

A critical vulnerability in Vim versions prior to 9.2.0276 allows arbitrary OS command execution via a crafted file that bypasses the modeline sandbox due to missing security checks, potentially leading to code execution.

vim modeline sandbox-bypass code-execution cve-2026-34982

3r 1t 1c 5i 4w ago

critical advisory

OpenClaw Sandbox Bypass via Heartbeat Context Inheritance

2 rules

A critical vulnerability in the openclaw npm package (<=2026.3.28) allows a heartbeat context inheritance to bypass the sandbox via senderIsOwner escalation, patched in version 2026.3.31.

sandbox-bypass dependency-vulnerability npm

2r Apr 2, 2026