OpenClawMachines

OpenClaw Machines Run as many isolated OpenClaw agents as you need, on hardware you own. OpenClaw Machines is an open-source platform for runningOpenClaw in secure AI sandboxes on your own infrastructure. A control plane orchestrates your hosts, and each agent runs in its own Firecracker microVM ...

vmsan

vmsan 🔥 Firecracker microVM sandbox toolkit Create, manage, and connect to isolated Firecracker microVMs from the command line. Boot a sandboxed VM in milliseconds, run commands, transfer files — no SSH required. 📚 Read the full documentation at vmsan.dev ✨ Features...

sandbox

Concave AI Sandbox Run AI code safely, fast, untrusted A self-hostable code execution sandbox platform built with Firecracker microVMs. Sub-200ms startup times with snapshot-based warm pooling. About Concave provides secure, isolated code execution environments for running untrusted code. Built...

bouvet

Bouvet Isolated code execution sandboxes for AI agents About • How It Works • MCP Tools • Documentation What is Bouvet? Bouvet boo-veh is an MCP server that creates secure, isolated sandboxes for AI agents to execute code. When an AI agent needs to run Python, Node.js, or shell commands, Bouvet...

zeroboot

Sub-millisecond VM sandboxes for AI agents via copy-on-write forking Try it root@kitploit: curl -X POST https://api.zeroboot.dev/v1/exec \ -H 'Content-Type: application/json' \ -H 'Authorization: Bearer zbdemohn2026' \ -d '"code":"import numpy as np; printnp.random.rand3"' Benchmarks Each sandbox...

mitos

Mitos AI 에이전트를 위한 격리되고 포크 가능한 컴퓨터. Kubernetes에서 밀리초 단위 마이크로VM 샌드박스 포크: 실행 중인 VM을 포크하여 병렬 시도로 분기하고 수십 밀리초 내에 메모리에서 복원합니다. 빠른 시작 . 문서 . 기능 . 비교 . 기여 . 커뮤니티 Mitos란 무엇인가요? Mitos는 모든 AI 에이전트에 자체 격리된 컴퓨터를 제공합니다: 신뢰할 수 없는 코드를 안전하게 실행하는 하드웨어 격리 Firecracker 마이크로VM으로, 실행 중에도 포크할 수 있습니다. 라이브 COWCopy-on-Writ...

firecracker

私たちの使命は、セキュアでマルチテナント、最小オーバーヘッドのコンテナおよび関数ワークロードの実行を可能にすることです。 Firecracker Charter の詳細はこちらをご覧ください。 Firecrackerとは？...

ANT-2026-PQ3CNCCK · firecracker-microvm/firecracker · Memory Safety / Out-of-Bounds Read+Write (unsafe Rust)

oob-read high CVE-2026-5747 GHSA-776c-mpj7-jm3r Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-PQ3CNCCK: Virtio-PCI queue size writable after activation enables host OOB I...

AWS VDP: Firecracker Out-of-bounds Read/Write Local Privilege Escalation Vulnerability

A vulnerability was discovered in Firecracker versions up to 1.15.1 that could allow a malicious guest to bypass protection mechanisms and perform out-of-bounds read and write operations on the virtio PCI queue. The vulnerability was caused by inconsistencies in the handling of queue activation...

OPENSUSE-SU-2026:10561-1 firecracker-1.15.1-1.1 on GA media

These are all security issues fixed in the firecracker-1.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-5747

An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x8664 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virtio queue...

CVE-2026-5747

A flaw was found in Firecracker, specifically an out-of-bounds write issue within the virtio PCI transport. A local guest user with root privileges can exploit this by modifying virtio queue configuration registers after device activation. This could lead to crashing the Firecracker Virtual Machi...

CVE-2026-5747

An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x8664 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virtio queue...

Amazon Firecracker 安全漏洞

Amazon Firecracker is a virtualization technology developed by Amazon, used specifically for creating and managing multi-tenant containers and functions-based services. It provides a serverless operating model, designed for creating and managing multi-tenant containers and functions-based service...

CVE-2026-5747 Out-of-bounds Write in Firecracker virtio-pci Transport

An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x8664 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virtio queue...

EUVD-2026-19996

An out-of-bounds write issue in the virtio PCI transport in Amazon Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x8664 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virti...

CVE-2026-5747 Out-of-bounds Write in Firecracker virtio-pci Transport

An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x8664 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virtio queue...

CVE-2026-5747

An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x8664 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virtio queue...

CVE-2026-5747

Summary: CVE-2026-5747 is a local, hypothetical out-of-bounds write in the virtio-pci transport of Firecracker. Affects Firecracker versions 1.13.0–1.14.3 and 1.15.0 on x86_64 and aarch64. The issue could allow a local guest user with root privileges to crash the Firecracker VMM process or potent...

CVE-2026-5747

An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x8664 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virtio queue...