CVE-2026-57144

"praisonai.sandbox.SandlockSandbox" is documented and implemented as the kernel-enforced sandbox backend for untrusted code. Its "SandboxConfig.native" path lets callers configure allowed filesystem paths and "network=False". On systems where the optional "sandlock" module imports but reports tha...