sandboxed.sh vulnerabilities

1 known vulnerability in sandboxed.sh from Th0rgal. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  sandboxed.sh: Initialization of a Resource with an Insecure Default

  CVE-2026-109569Oct 12, 2026Th0rgal

  sandboxed.sh through 1.3.0 contains a container escape vulnerability that allows code in container workspaces to access the host filesystem because nsenter attaches without --root. Agent-run code in a container workspace can resolve absolute paths on the host