Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2025/12/09 8:27 a.m.5 views

CVE-2025-66479

Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the...

1.8CVSS7.2AI score0.00136EPSS
Exploits0References1
NVD
NVD
added 2025/12/04 9:16 p.m.5 views

CVE-2025-66479

Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the...

1.8CVSS0.00136EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/04 8:57 p.m.4 views

CVE-2025-66479 Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing

Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the...

1.8CVSS6.9AI score0.00136EPSS
Exploits0References2
CVE
CVE
added 2025/12/04 8:57 p.m.9 views

CVE-2025-66479

Anthropic Sandbox Runtime (sandbox-runtime) had a flaw where the network sandbox was not properly enforced if no allowed domains were configured, potentially allowing outbound network access from sandboxed processes prior to v0.0.16. A patch is available in v0.0.16; upgrade to 0.0.16 or later for...

1.8CVSS6.9AI score0.00136EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/04 8:57 p.m.18 views

CVE-2025-66479 Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing

Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the...

1.8CVSS0.00136EPSS
Exploits0References2
OSV
OSV
added 2025/12/04 8:57 p.m.2 views

CVE-2025-66479 Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing

Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the...

1.8CVSS7.2AI score0.00136EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2025/12/04 4:55 p.m.6 views

Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing

Due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the sandbox policy did not configure any allowed domains. This could allow sandboxed code to make network requests outside of the sandbox. A patch for this was released in v0.0.16. Thank you to...

1.8CVSS7.2AI score0.00136EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/12/04 4:55 p.m.2 views

GHSA-9GQJ-5W7C-VX47 Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing

Due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the sandbox policy did not configure any allowed domains. This could allow sandboxed code to make network requests outside of the sandbox. A patch for this was released in v0.0.16. Thank you to...

1.8CVSS7AI score0.00136EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/12/04 12:0 a.m.3 views

Anthropic Sandbox Runtime 安全漏洞

Anthropic Sandbox Runtime is a lightweight sandboxing tool from Anthropic-experimental open source. A security vulnerability exists in Anthropic Sandbox Runtime versions prior to 0.0.16, which stems from an error in the sandbox logic that could cause network requests to bypass the sandbox...

1.8CVSS6.5AI score0.00136EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.7 views

PT-2025-49149

Name of the Vulnerable Software and Affected Versions Anthropic Sandbox Runtime versions prior to 0.0.16 Description Anthropic Sandbox Runtime is a sandboxing tool designed to enforce filesystem and network restrictions on processes. Prior to version 0.0.16, a flaw in the sandboxing logic allowed...

1.8CVSS6.9AI score0.00136EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2024/05/27 12:0 a.m.9 views

Fedora: Security Advisory (FEDORA-2024-80e062d21a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS8.1AI score0.05292EPSS
Exploits4References5
Rows per page
Query Builder