skyvern vulnerabilities

2 known vulnerabilities in skyvern from Skyvern-AI. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  skyvern: Incomplete List of Disallowed Inputs

  CVE-2026-123783Nov 6, 2026Skyvern-AI

  Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType. Attackers can deploy scripts that evade the is_safe_script_code AST denylist and i

• 8.8 High severity

  skyvern: Improper Neutralization of Special Elements Used in a Template Engine

  CVE-2026-82447Aug 29, 2026Skyvern-AI

  Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through an unsandboxed environment. Attackers can inject malicious Jinja template syntax through w