2 matches found
PT-2026-59255
Impact The POST /guardrails/test custom code endpoint runs user-supplied Python inside a hand-rolled sandbox. The sandbox can be escaped using bytecode-level techniques, allowing arbitrary code execution in the proxy process — which runs as root in the default Docker image. Reaching the endpoint...
8.8CVSS6.7AI score0.03399EPSS
SaveExploits2References8
20