Skyvern-AI vulnerabilities
We track 2 vulnerabilities in Skyvern-AI products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Skyvern-AI vulnerabilities
- 8.8 High severity
skyvern: Incomplete List of Disallowed Inputs
Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType. Attackers can deploy scripts that evade the is_safe_script_code AST denylist and i
- 8.8 High severity
skyvern: Improper Neutralization of Special Elements Used in a Template Engine
Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through an unsandboxed environment. Attackers can inject malicious Jinja template syntax through w