Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/16 8:13 p.m.28 views

Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

Summary The safeevalexpression function in the computed fields feature uses an AST validator that only blocks attributes starting with underscore. Python generator and frame object attributes giframe, fback, fbuiltins do NOT start with underscore, enabling a complete sandbox escape to achieve...

10CVSS6.7AI score0.0061EPSS
SaveExploits2References8Affected Software1
Rows per page
Query Builder