Sandbox-Bypass

Python tarfile `filter="data"` Bypass via PATH_MAX/realpath Confusion (CVE-2025-4517) newCVE-2025-4517miscCRITICAL 9.4Patched2026-07-06n8n Unauthenticated Arbitrary File Read to RCE Full Chain — CVE-2026-21858 + CVE-2025-68613 new EPSS 78%CVE-2026-21858, CVE-2025-68613webCRITICAL 10Patched2026-07-05Microsoft Semantic Kernel In-Memory Vector Store Filter eval() Sandbox Bypass RCE (CVE-2026-26030) newCVE-2026-26030miscCRITICALPatched2026-07-05Math.js Expression Parser Sandbox Bypass RCE (CVE-2026-40897) newCVE-2026-40897webCRITICALPatched2026-07-05local-mcp exec Tool Sandbox/Restriction Bypass (CVE-2026-6130) newCVE-2026-6130miscMEDIUMUnverified2026-07-05