CWE-265
15 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 15Published CVEs15 of them scored
- 9Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-116367
DeepSeek Harness sandbox.ts createContext
DeepSeek · Harness
Medium5.3 - CVE-2026-108788
deepseek-ai deepseek-harness Sandbox spawn sandbox
deepseek-ai · deepseek-harness
Medium4.8 - CVE-2026-101102
deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox
deepseek-ai · deepseek-harness
Medium5.3 - CVE-2026-18593
vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandbox
vxcontrol · PentAGI
Medium6.3 - CVE-2026-14784
vxcontrol PentAGI Docker API client.go sandbox
vxcontrol · PentAGI
Medium5.3 - CVE-2026-9368
NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandbox
NousResearch · hermes-agent
Medium6.9 - CVE-2026-6878
ByteDance verl grader.py math_equal sandbox
ByteDance · verl
Medium6.3 - CVE-2026-6224
nocobase plugin-workflow-javascript Vm.js createSafeConsole sandbox
nocobase · plugin-workflow-javascript
Medium6.9 - CVE-2026-6117
AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox
AstrBotDevs · AstrBot
Medium5.3 - CVE-2025-5874
Redash getattr python.py run_query sandbox
Redash
Low2.1