Security researcher Chinmohan Nayak has detailed a WhatsApp-to-host attack chain leveraging three now-patched vulnerabilities in the OpenClaw personal AI assistant. The flaws,…
A symlink flaw in Claude Code's sandbox allows escape from containment, potentially enabling code execution on the host. This vulnerability was referenced…
CVE-2026-10702 is a Firefox vulnerability that allows code execution inside the browser and escapes its sandbox. It forms the first half of…
Two critical vulnerabilities in Cursor, an AI-powered code editor, allow prompt injection attacks to escape the editor's safety sandbox and execute arbitrary…
A vulnerability in WebKit that could allow a malicious website to process restricted web content outside the sandbox.
Firefox is a web browser developed by Mozilla. It was part of the IonStack exploit chain, where CVE-2026-10702 allowed sandbox escape, combined…
Three vulnerabilities in OpenClaw could be chained to achieve host code execution from a WhatsApp message, leading to credential theft and sandbox…
A chain of three vulnerabilities in LiteLLM, a widely deployed open-source AI gateway, allows low-privilege users to escalate to full admin and…
X41 D-Sec independently found a sandbox escape path in LiteLLM's Custom Code Guardrail playground endpoint, which bypassed a regex deny-list through runtime…
CVE-2026-40217 is a sandbox escape vulnerability in LiteLLM's Custom Code Guardrail, where Python's exec() function is used without proper filtering, allowing attackers…