Vendor
critical
advisory
Beta9: Sandbox escape via volume mount path traversal (CVE-2026-120308)
1 TTP 1 CVEA path traversal vulnerability in the Beta9 gateway fails to validate volume ownership and paths, allowing tenants to access arbitrary worker files and other tenants data.
Gateway +1
path-traversal
sandbox-escape
cloud
1t
1c
critical
advisory
Beta9 Worker: Sandbox path traversal (CVE-2026-120307)
1 TTP 1 CVEThe Beta9 worker contains a path traversal vulnerability in the sandbox file API that allows authenticated tenants to read, write, and delete arbitrary files on the host worker filesystem.
worker
1t
1c