3 matches found
PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable
Summary praisonai.sandbox.SandlockSandbox is documented and implemented as the kernel-enforced sandbox backend for untrusted code. Its SandboxConfig.native path lets callers configure allowed filesystem paths and network=False. On systems where the optional sandlock module imports but reports tha...
10CVSS6.2AI score0.00383EPSS
SaveExploits1References2Affected Software1
20