{"id":"CVE-2026-109569","published":"2026-10-12T21:17:13.653","lastModified":"2026-10-16T18:25:45.343","description":"sandboxed.sh through 1.3.0 contains a container escape vulnerability that allows code in container workspaces to access the host filesystem because nsenter attaches without --root. Agent-run code in a container workspace can resolve absolute paths on the host to read and modify host files, bypassing documented isolation.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-1188"],"vendors":[],"products":[],"references":[{"url":"https://github.com/Th0rgal/orb","tags":[]},{"url":"https://github.com/Th0rgal/orb/commit/4ab42e91b16c452f77d93ca69a040a54229b0aa2","tags":[]},{"url":"https://www.vulncheck.com/advisories/sandboxed-sh-through-1.3.0-container-escape-via-nsenter-missing-root-namespace","tags":[]}],"exploitRefs":[{"url":"https://github.com/Th0rgal/orb","tags":[]},{"url":"https://github.com/Th0rgal/orb/commit/4ab42e91b16c452f77d93ca69a040a54229b0aa2","tags":[]}],"hasPoc":true,"ai":{"summary":"A container escape vulnerability in sandboxed.sh allows containerized code to access and modify host filesystems by using nsenter without --root flag, bypassing expected isolation boundaries. This creates a high-risk scenario where attackers can read and write arbitrary host files from within containers.","exploitability":"Exploitation is moderately difficult requiring a container workspace with agent-run code that can resolve absolute paths on the host, but the precondition is relatively common in development environments.","blast_radius":"The impact could be severe across many systems as attackers can read sensitive host files, modify critical configuration or binaries, and potentially establish persistent access through host-level persistence mechanisms.","remediation":"Upgrade to sandboxed.sh version 1.3.1 or later to address the container escape vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["container-escape","privilege-escalation","filesystem-access"],"model":"garnet-coder","analyzedAt":"2026-10-16T08:57:56.303Z"}}