vmsan

vmsan 🔥 Firecracker 微虚拟机沙盒工具包 从命令行创建、管理和连接隔离的 Firecracker 微虚拟机。可在毫秒内启动沙盒虚拟机，运行命令，传输文件 —— 无需 SSH。 📚 阅读完整文档：vmsan.dev ✨ 特性 ⚡ 毫秒级启动 — Firecracker 微虚拟机在 200ms 内启动 🔒 安全隔离 — jailer、seccomp、cgroups 以及每 VM 网络命名空间 🖥️ 交互式 Shell — 支持完整终端的 WebSocket PTY 📂 文件传输 — 无需 SSH 即可上传和下载 🐳 Docker 镜像 — 使用 --from-image 从任...

sandbox

Concave AI Sandbox Ejecuta código de IA de forma segura, rápida y no fiable Una plataforma de caja de arena de ejecución de código auto-alojable construida con microVMs de Firecracker. Tiempos de inicio inferiores a 200ms con agrupación en caliente basada en instantáneas. Acerca de Concave...

OpenClawMachines

OpenClaw Machines 在你自己的硬件上运行任意数量的隔离 OpenClaw 代理。 OpenClaw Machines 是一个开源平台，用于在你自己的基础设施中以安全的 AI 沙箱运行OpenClaw。控制平面 编排你的主机，每个代理在自己独立的 Firecracker 微虚拟机中运行——通过硬件隔离，安全处理不可信和代理生成的代码。Cloudflare 数据平面 是前端入口：每台机器通过边缘认证获得自己的子域名，通过一条终止于 VM 内部 的隧道访问——主机无需暴露任何端口用于用户到 VM 的流量。当前的控制平面仍需要私有或防火墙限制的访问来连接每个代理在 9090...

bouvet

Bouvet Sandboxes de ejecución de código aislados para agentes de IA Acerca de • Cómo funciona • Herramientas MCP • Documentación ¿Qué es Bouvet? Bouvet boo-veh es un servidor MCP que crea sandboxes seguros y aislados para que los agentes de IA ejecuten código. Cuando un agente de IA necesita...

firecracker

Nuestra misión es permitir la ejecución segura, multiinquilino y con mínima sobrecarga de cargas de trabajo de contenedores y funciones. Lee más sobre la Carta de Firecracker aquí. ¿Qué es Firecracker? Firecracker es una tecnología de virtualización de código abierto diseñada específicamente para...

zeroboot

通过写时复制分叉为 AI 代理提供亚毫秒级 VM 沙箱 试试看 curl -X POST https://api.zeroboot.dev/v1/exec \ -H 'Content-Type: application/json' \ -H 'Authorization: Bearer zbdemohn2026' \ -d '"code":"import numpy as np; printnp.random.rand3"' 基准测试 指标| Zeroboot| E2B| microsandbox| Daytona ---|---|---|---|--- 生成延迟 p50| 0.79ms...

mitos

Mitos Computadoras aisladas y bifurcables para tus agentes de IA. Bifurcación de sandbox microVM en milisegundos en Kubernetes: bifurca una VM en ejecución en intentos paralelos y restáurala desde la memoria en decenas de milisegundos. Inicio rápido . Documentación . Características . Comparación...

firecracker v1.17.0

Our mission is to enable secure, multi-tenant, minimal-overhead execution of container and function workloads. Read more about the Firecracker Charter here. What is Firecracker? Firecracker is an open source virtualization technology that is purpose-built for creating and managing secure,...

ANT-2026-PQ3CNCCK · firecracker-microvm/firecracker · Memory Safety / Out-of-Bounds Read+Write (unsafe Rust)

oob-read high CVE-2026-5747 GHSA-776c-mpj7-jm3r Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-PQ3CNCCK: Virtio-PCI queue size writable after activation enables host OOB I...

mitos v1.43.0

Mitos Isolated, forkable computers for your AI agents. Millisecond microVM sandbox forking on Kubernetes: fork a running VM into parallel attempts and restore from memory in tens of milliseconds. Quickstart . Documentation . Features . Comparison . Contributing . Community What is Mitos Mitos giv...

AWS VDP: Firecracker Out-of-bounds Read/Write Local Privilege Escalation Vulnerability

A vulnerability was discovered in Firecracker versions up to 1.15.1 that could allow a malicious guest to bypass protection mechanisms and perform out-of-bounds read and write operations on the virtio PCI queue. The vulnerability was caused by inconsistencies in the handling of queue activation...

OPENSUSE-SU-2026:10561-1 firecracker-1.15.1-1.1 on GA media

These are all security issues fixed in the firecracker-1.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-5747

An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x8664 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virtio queue...

CVE-2026-5747

A flaw was found in Firecracker, specifically an out-of-bounds write issue within the virtio PCI transport. A local guest user with root privileges can exploit this by modifying virtio queue configuration registers after device activation. This could lead to crashing the Firecracker Virtual Machi...

CVE-2026-5747

An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x8664 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virtio queue...

Amazon Firecracker 安全漏洞

Amazon Firecracker is a virtualization technology developed by Amazon, used specifically for creating and managing multi-tenant containers and functions-based services. It provides a serverless operating model, designed for creating and managing multi-tenant containers and functions-based service...

CVE-2026-5747: Out-of-bounds Write

An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x8664 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virtio queue...

CVE-2026-5747 Out-of-bounds Write in Firecracker virtio-pci Transport

An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x8664 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virtio queue...

EUVD-2026-19996

An out-of-bounds write issue in the virtio PCI transport in Amazon Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x8664 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virti...

CVE-2026-5747

An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x8664 and aarch64 might allow a local guest user with root privileges to crash the Firecracker VMM process or potentially execute arbitrary code on the host via modification of virtio queue...