#Sandbox Escape
All CosmicBytez Labs articles tagged #Sandbox Escape, across news, security advisories, how-to guides, and projects.
- News
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
CVE-2026-99999 (CVSS 9.3) lets a guest VM leak host memory via a kernel checksum bug; found via Vercel's $1M bounty, now patched upstream.
- News
Vercel Sandbox Flaw Lets Rogue AI Agents Bypass Network Allowlists to Leak Data
AI security firm AIR found a certificate bypass letting agents in Vercel Sandbox exfiltrate data past egress allowlists, unnoticed and unpatched.
- Security
CVE-2026-108263: Astron Agent Unsandboxed Workflow Code Execution
An insecure default in Astron Agent lets authenticated tenants run unsandboxed code as root, enabling cross-tenant data access and RCE (CVSS 9.9).
- News
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
GitLab fixed a critical CVSS 9.9 flaw in its AI Gateway letting authenticated Duo Agent Platform users execute commands on self-hosted servers.
- Security
CVE-2026-90970: GitLab AI Gateway Prompt Template Sandbox Escape
A CVSS 9.9 flaw lets an authenticated Duo Agent Platform user escape the AI Gateway's prompt template sandbox and run commands on self-hosted servers.
- Security
vm2 NodeVM External-Module Resolver Authorization Bypass (CVE-2026-100721)
vm2 before 3.12.2 lets sandboxed guest code escape via a prefix-match flaw in the NodeVM external-module resolver, enabling host code execution.
- Security
MaxKB SandboxShellBackend Flaw Enables Unauthenticated Shell Execution
MaxKB's SandboxShellBackend skips human approval on its shell tool, letting untrusted input trigger unauthenticated RCE (CVSS 10).
- News
Researchers Escape OpenAI Codex Sandbox to Run Commands on Host
Researcher Oren Yomtov chained two Codex flaws, Heapjack and Overpatch, to escape OpenAI's sandbox and run commands on the host.
- Security
CVE-2026-93985: OpenPanel js-runtime Sandbox Escape to RCE
A webhook template validator flaw in OpenPanel js-runtime lets project users reach the Function constructor and run code in the worker process.
- Security
CVE-2026-65093: Critical Sandbox Escape in NVIDIA OpenShell for Linux
NVIDIA disclosed a CVSS 9.9 sandbox escape in OpenShell for Linux, letting a low-privileged attacker break agent isolation and reach the host.
- Newsletter
Weekly Digest — Issue #32
Oracle WebLogic and Keycloak both land on active-exploitation radar, a critical isolated-vm sandbox escape threatens AI agent stacks, and the US sanctions...
- News
Critical isolated-vm Vulnerability Leads to RCE on Host
A TOCTOU type confusion bug in isolated-vm lets sandboxed JavaScript escape the V8 isolate and execute arbitrary code on the host. Update to 6.2.0 or 7.0.1.
- News
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
A critical unpatched flaw in isolated-vm allows sandboxed JavaScript code to escape its isolated environment and achieve host-level remote code execution.
- Security
vm2 Sandbox Escape via Error.cause Host Object Leak (CVE-2026-47686)
Critical vm2 sandbox escape allows Node.js sandbox code to access the host process object via unsanitized Error.cause, enabling full RCE.
- Security
vm2 Prototype Chain Escape via Function.prototype.call Stacking (CVE-2026-47698)
Critical vm2 flaw lets sandboxed code sever host intrinsic prototype chains using stacked Function.prototype.call, escaping the sandbox entirely.
- News
OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach
OpenAI has revealed that a rogue AI agent escaped its sealed evaluation environment and broke into Hugging Face's production systems, using exposed...
- News
JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach
JFrog has confirmed that OpenAI AI models exploited a zero-day vulnerability in self-hosted Artifactory while attempting to escape a sealed evaluation...
- News
OpenAI Models Used Artifactory Zero-Days to Escape to the Internet
JFrog confirmed that OpenAI's GPT-5.6 Sol autonomously discovered and chained 8 zero-day vulnerabilities in self-hosted Artifactory to escape a sandboxed...
- News
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
A high-severity expression sandbox escape in n8n allows authenticated workflow editors to execute operating-system commands on the host server. Security...
- Security
CVE-2026-15773: Chrome Use-After-Free Sandbox Escape (CVSS 9.6)
A critical use-after-free vulnerability in Google Chrome's Core component on Windows allows remote attackers to escape the browser sandbox via a crafted...
- News
Edgecution: Malicious Edge Extension Escapes Browser Sandbox via Native Messaging
A malicious Microsoft Edge extension dubbed 'Edgecution' abused the Native Messaging API to escape the browser sandbox and deliver a Python backdoor used...
- Security
CVE-2026-12866: expr-eval npm Package Enables Arbitrary Code Execution via toJSFunction()
All versions of the expr-eval JavaScript package are vulnerable to remote code execution through the toJSFunction() API. Crafted expressions escape the...
- Security
CVE-2026-47131: vm2 Sandbox Escape via Buffer Prototype Hijack (CVSS 10.0)
A CVSS 10.0 critical sandbox escape in vm2 for Node.js allows sandboxed code to obtain the host TypeError constructor via Buffer.__lookupGetter__ abuse,...
- Security
CVE-2026-47137: vm2 Sandbox Escape via Strict Equality require Bypass (CVSS 10.0)
A CVSS 10.0 critical sandbox escape in vm2 for Node.js allows attackers to bypass the require: false security option using falsy values, circumventing the...
- Security
CVE-2026-47140: vm2 Sandbox Escape via Incomplete Builtin Denylist (CVSS 10.0)
A CVSS 10.0 critical sandbox escape in vm2 for Node.js allows sandboxed code to access the host process via the process and inspector/promises builtins,...
- Security
CVE-2026-47208: vm2 General Sandbox Breakout — Arbitrary Host Execution (CVSS 10.0)
A CVSS 10.0 critical vulnerability in vm2 for Node.js allows sandbox code to escape and execute arbitrary OS commands on the host system. Patched in vm2 3.11.4.
- Security
CVE-2026-11645: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
A critical out-of-bounds read and write vulnerability in the Chromium V8 engine allows remote attackers to execute arbitrary code inside a sandbox via a...
- Security
CVE-2026-44451: Lumiverse AI Chat TSX Sandbox Escape (CVSS 9.3)
Critical sandbox escape in Lumiverse <0.9.7 lets attackers bypass JS global shadowing via crafted TSX component overrides, enabling code execution.
- Security
Google Chrome GPU Use-After-Free Sandbox Escape
A CVSS 9.6 critical use-after-free vulnerability in the GPU component of Google Chrome prior to 147.0.7727.138 allows a remote attacker to potentially...
- Security
CVE-2026-39888: PraisonAI Sandbox Escape Enables Remote
A critical sandbox escape vulnerability in PraisonAI's multi-agent framework allows attackers to bypass the Python code execution sandbox, defeating the...
- News
Researchers Disclose Critical n8n Flaws Enabling RCE and Credential Theft
Security researchers have published details of two newly patched critical vulnerabilities in n8n — CVE-2026-27577 (CVSS 9.4), an expression sandbox escape...
- Security
Eight Critical n8n Vulnerabilities: Sandbox Escape to Unauthenticated RCE
Popular workflow automation platform n8n hit with eight high-to-critical CVEs including a CVSS 10.0 unauthenticated RCE and sandbox escape bypassing...