PYSEC-2026-3731

NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open where the sandbox validation check compares a normalized path against itself, making the security check permanently inert. Attackers can pass file:// URLs to nltk.data.load to read arbitrary files accessible to the...

CVE-2026-6442

Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox. An attacker could exploit this by embedding specially crafted commands in untrusted content, such as a malicious repository, causing the CLI agent...

CVE-2026-39419

MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an authenticated user can bypass sandbox result validation and spoof tool execution results by exploiting Python frame introspection to read the wrapper's UUID from its bytecode constants, then writing a forged resu...

PT-2026-30429

Name of the Vulnerable Software and Affected Versions AntaresMugisho PyBlade versions 0.1.8-alpha through 0.1.9-alpha Description A flaw exists in the AST Validation component of AntaresMugisho PyBlade. Specifically, the is safe ast function within the sandbox.py file is susceptible to improper...

EUVD-2026-17441

OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the message tool that allows attackers to read arbitrary local files by using mediaUrl and fileUrl alias parameters that bypass localRoots validation. Remote attackers can exploit this by routing file requests through unvalidate...

CVE-2026-27002

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a configuration injection issue in the Docker tool sandbox could allow dangerous Docker options bind mounts, host networking, unconfined profiles to be applied, enabling container escape or host data access. OpenClaw 2026.2.15 block...

CVE-2025-43364

A race condition (CWE-362) exists in Apple macOS (specifically Sonoma , Sequoia , and Tahoe ) caused by improper synchronization during concurrent execution. This vulnerability could allow an application to break out of its sandbox restrictions. The issue has been addressed with additional valida...