tag
Sandbox-Bypass
Critical
Python tarfile `filter="data"` Bypass via PATH_MAX/realpath Confusion (CVE-2025-4517)
CVE-2025-4517·
Python standard library tarfile module — filter="data" / filter="tar" extraction filters (PEP 706)
patched
Critical
n8n Unauthenticated Arbitrary File Read to RCE Full Chain — CVE-2026-21858 + CVE-2025-68613
CVE-2026-21858, CVE-2025-68613·
n8n workflow automation platform
patched
Critical
Microsoft Semantic Kernel In-Memory Vector Store Filter eval() Sandbox Bypass RCE (CVE-2026-26030)
CVE-2026-26030·
Microsoft Semantic Kernel (Python), InMemoryCollection vector store connector
patched
Critical
Math.js Expression Parser Sandbox Bypass RCE (CVE-2026-40897)
CVE-2026-40897·
Math.js expression parser (Node.js library)
patched
Medium
local-mcp exec Tool Sandbox/Restriction Bypass (CVE-2026-6130)
CVE-2026-6130·
local-mcp (zero-dependency MCP server for local file operations, v1.1.1)
unpatched