sandbox-escape
1 live · 27 on record · last incident 1 day ago
Live1
- liveiOS worse_query: iOS Sandbox Escape Published Without Vendor Fix
Research · since 8 Nov 2026
An iOS sandbox escape called worse_query was published on GitHub, allowing malicious apps to read other applications files on supported versions. Binance warned that this flaw exposes sensitive wallet keys and login credentials, and no vendor fix has been confirmed yet.
Do:Monitor for Apple security updates addressing the sandbox escape.
Earlier26
- closed6.3Flowise CVE-2026-127214: Flowise server-side request forgery vulnerability
Patch now · Disclosed · since 13 Nov 2026 · CVE-2026-127214
AI - closed7.7Claude Code + SDKs CVE-2026-88968: Path traversal flaw in Claude Code allows arbitrary file overwrite
Patch now · Disclosed · Patched · since 3 Nov 2026 · updated 9 Nov 2026 · CVE-2026-88968
AI - closed9.0Flowise CVE-2026-119978: Flowise Sandbox Escape Leads to OS Command Execution
Patch now · Disclosed · since 30 Oct 2026 · CVE-2026-119978
AI - closed9.0Wasmtime Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
Patch now · Disclosed · Patched · since 26 Oct 2026
- closed8.8Langflow CVE-2026-97676: IBM Langflow OSS remote code execution vulnerability
Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-97676
AI - closed8.6Flowise CVE-2026-73484: Flowise pythonCodeValidator sandbox escape vulnerability
Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-73484
AI - closed9.9Flowise CVE-2026-73602: Sandbox escape and code execution in Flowise
Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-73602
AI - closed9.4Flowise CVE-2026-73483: Flowise NodeVM sandbox escape via puppeteer configuration
Patch now · Disclosed · since 7 Oct 2026 · updated 7 Oct 2026 · CVE-2026-73483
AI - closed7.7Cursor CVE-2026-73217: Sandbox escape vulnerability in Cursor IDE
Patch now · Disclosed · since 11 Aug 2026 · CVE-2026-73217
AI - closed7.7Cursor CVE-2026-73218: Cursor IDE Sandbox Escape and Host Command Execution
Patch now · Disclosed · since 11 Aug 2026 · CVE-2026-73218
AI - closed9.3MCP servers & tools CVE-2026-67531: FrontMCP Sandbox Escape Leading to RCE
Patch now · Disclosed · since 6 Aug 2026 · CVE-2026-67531
AI - closed9.4Flowise CVE-2026-69254: Flowise RCE via NodeVM Sandbox Escape in executeJavaScriptCode
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-69254
AI - closed9.0Flowise CVE-2026-69253: Flowise Sandbox Escape to Remote Code Execution
Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-69253
AI - closed9.9Langflow CVE-2026-13435: IBM Langflow OSS PythonREPL Sandbox Input Validation Flaw
Patch now · Disclosed · since 30 Jul 2026 · CVE-2026-13435
AI - closedOpenAI models OpenAI Models Escaped Sandbox and Reached Hugging Face Infrastructure
Research · since 11 Jul 2026
AI - closed7.7Claude Code + SDKs CVE-2026-55607: Claude Code sandbox escape via git worktree path confusion
Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-55607
AI - closed9.4Flowise CVE-2026-46442: FlowiseAI NodeVM sandbox escape and RCE vulnerability
Patch now · Disclosed · since 14 May 2026 · updated 8 Jun 2026 · CVE-2026-46442
AI - closed10.0Claude Code + SDKs CVE-2026-39861: Claude Code Sandbox Escape via Symlink
Patch now · Disclosed · since 21 Apr 2026 · CVE-2026-39861
AI - closed8.8LiteLLM CVE-2026-40217: LiteLLM sandbox escape in custom-code guardrail
Patch now · Disclosed · since 11 May 2026 · updated 11 May 2026 · CVE-2026-40217
AI - closedLiteLLM LiteLLM sandbox escape vulnerability in custom-code guardrail
Patch now · Disclosed · since 10 Apr 2026
AI - closedClaude Mythos Preview Claude Mythos Preview Bypassed Sandbox and Posted Exploit Details
Research · since 7 Apr 2026
AI - closed5.8Claude Code + SDKs CVE-2026-34452: Anthropic Claude Python SDK Sandbox Escape
Patch now · Disclosed · since 1 Apr 2026 · CVE-2026-34452
AI - closed6.3Claude Code + SDKs CVE-2026-34451: Claude TypeScript SDK Memory Tool Sandbox Escape
Patch now · Disclosed · since 1 Apr 2026 · CVE-2026-34451
AI - closed7.7Claude Code + SDKs CVE-2026-25725: Claude Code Sandbox Escape via Settings Injection
Patch now · Disclosed · since 6 Feb 2026 · CVE-2026-25725
AI - closed8.6OpenAI Codex CVE-2025-59532: Sandbox bypass and arbitrary file write vulnerability in OpenAI Codex CLI
Patch now · Disclosed · since 22 Sep 2025 · updated 22 Sep 2025 · CVE-2025-59532
AI - closed8.6Flowise CVE-2024-58351: Flowise OverrideConfig security vulnerability
Patch now · Disclosed · since 21 Nov 2024 · updated 20 Jun 2026 · CVE-2024-58351
AI