bubblewrap

Bubblewrap 许多容器运行时工具，如 systemd-nspawn、docker 等，专注于为系统管理员和编排工具（例如 Kubernetes）提供运行容器的基础设施。 这些工具不适合提供给非特权用户，因为将此类访问权限转化为宿主机上完全特权级的 root shell 是轻而易举的。 用户命名空间 Linux 内核中有一个名为用户命名空间的特性，它允许非特权用户使用容器功能。Bubblewrap 利用这些特性来构建沙箱，从而允许任何用户使用该工具。 从历史上看，bubblewrap 还曾为不支持非特权用户命名空间的系统提供 setuid 模式。然而，该模式已被移除。 最初的...

flar

flar FLARはFast Light Agent Restrictorです。garsと呼ばれる岩の上で動作します。 Goで書かれたシンプルで軽量なCLIツールで、Claude Code、Antigravity、Codex、Copilot、ReasonixといったコーディングエージェントCLIを、隔離されたBubblewrap（bwrap）サンドボックス内で安全に実行するためのものです。 目的は、複雑な設定なしに 即座に...

Astra Linux – Vulnerability in Flatpak

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak application could execute arbitrary code outside its sandbox. Normally, the --command argument of flatpak...

Astra Linux – Vulnerability in Flatpak

Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app that used persistent directories could access and write files outside of its usual access rights, which constituted an attack on integrity and...

Cordon

Cordon ⚠️ プロジェクト非推奨 本プロジェクトの開発は停止しています 。同じアイデアに取り組み、より良いソリューションを構築した別の開発者がいたためです。 代わりに以下を強くお勧めします:Fence by Use-Tusk。 注: このリポジトリは元々FOSS HACK 2026 のために作成されましたが、残念ながら期限内に完成させることができませんでした。 しかし、Hackathena '26 で類似のプロジェクトを構築し、3位賞 を受賞しました！ 興味があれば、そのリポジトリはこちらにあります:A56-A5/lion。 Cordon は Linux...

DEBIAN-CVE-2026-87766

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

AZL-100908 CVE-2026-87766 affecting package bubblewrap 0.8.0-1

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

CVE-2026-87766

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

EUVD-2026-74778

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

CVE-2026-87766 Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

CVE-2026-87766

CVE-2026-87766 is a symlink traversal vulnerability in bubblewrap , a sandboxing tool used by the containers project. During sandbox setup, creating files or directories under the new root can follow a parent symlink via /oldroot onto the host, allowing an attacker to write files at arbitrary pat...

CVE-2026-87766 Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

CVE-2026-87766

A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the sandboxed process starts. This issue is...

Linux Distros Unpatched Vulnerability : CVE-2026-87766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot,...

Updated bubblewrap package fixes security vulnerabilities

Sandbox escape: symlink traversal via /oldroot allows writing files outside sandbox during setup...

MGASA-2026-0371 Updated bubblewrap package fixes security vulnerabilities

Sandbox escape: symlink traversal via /oldroot allows writing files outside sandbox during setup...

Bubblewrap: Root privilege escalation

Background Bubblewrap is an unprivileged sandboxing tool namespaces-powered chroot-like solution. Description A vulnerability has been discovered in Bubblewrap. Please review the CVE identifier referenced below for details. Impact An attacker could achieve root privilege escalation if Bubblewrap ...

GLSA-202608-09 : Bubblewrap: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-202608-09 Bubblewrap: Root privilege escalation A vulnerability has been discovered in Bubblewrap. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from...

n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows

Impact The shell tool in the @n8n/computer-use package applied its sandbox restrictions only on macOS. On Linux and Windows, shell commands executed by the tool ran without any filesystem or network restrictions, allowing unrestricted access to the host filesystem and network from within the...

CVE-2026-41163

A flaw was found in bubblewrap when operating in setuid mode. A local user may use ptrace to interfere with the sandbox setup process and gain access to privileged operations that are normally restricted. This could allow an attacker to bypass intended sandboxing restrictions and potentially...