CVE-2025-66479
Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the sandbox policy did not configure any allowed domains. This could allow sandboxed code to make network requests outside of the sandbox. A patch for this was released in v0.0.16.
Vendor
-
Product
-
CWE
Yayın Tarihi
2025-12-04 21:16:09
Güncelleme
2025-12-08 18:27:15
Source Identifier
security-advisories@github.com
KEV Date Added
-