Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2026/06/18 2:27 p.m.17 views

PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable

Summary praisonai.sandbox.SandlockSandbox is documented and implemented as the kernel-enforced sandbox backend for untrusted code. Its SandboxConfig.native path lets callers configure allowed filesystem paths and network=False. On systems where the optional sandlock module imports but reports tha...

10CVSS6.2AI score0.00383EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder