CVE-2025-66479

creationtimestamp| type| source ---|---|--- 2026-05-21 07:18:12+00:00| seen| https://gist.github.com/yurukusa/a40f9255aec358aba5aa1cb6087d1903 2026-05-24 11:47:05+00:00| seen| https://bsky.app/profile/mel-echosphere.bsky.social/post/3mmlvd4ifra2g...

CVE-2025-66479 Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing

Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the...

@townco/agent (>=0.1.20, <=0.1.144), @townco/cli (>=0.1.20, <=0.1.141) +1 more potentially affected by CVE-2025-66479 via @anthropic-ai/sandbox-runtime (0.0.2)

@anthropic-ai/sandbox-runtime NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on @anthropic-ai/sandbox-runtime and may be impacted: - @townco/agent =0.1.20, =0.1.20, =0.1.34, =0.1.38 Source cves: CVE-2025-66479 Source advisory:...