Sandbox-Bypass — PoC Archivehttps://poc.intelseclab.com/tags/sandbox-bypass/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Python tarfile `filter="data"` Bypass via PATH_MAX/realpath Confusion (CVE-2025-4517)https://poc.intelseclab.com/pocs/misc/2026-07-06_cve-2025-4517-tarfile-filter-data-path-max-bypass/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-06_cve-2025-4517-tarfile-filter-data-path-max-bypass/Critical severity (CVSS 9.4) — misc · CVE-2025-4517. Status: Weaponized. Affects: Python standard library tarfile module — filter="data" / filter="tar" extraction filters (PEP 706). Tags: python, tarfile, path-traversal, sandbox-bypass, path_max, realpath, symlink, cwe-22, stdlib.miscCriticalpythontarfilepath-traversalsandbox-bypasspath_maxrealpathsymlinkcwe-22stdlibn8n Unauthenticated Arbitrary File Read to RCE Full Chain — CVE-2026-21858 + CVE-2025-68613https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-21858-n8n-rce-chain/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-21858-n8n-rce-chain/Critical severity (CVSS 10) — web · CVE-2026-21858, CVE-2025-68613. Status: Weaponized. Affects: n8n workflow automation platform. Tags: n8n, arbitrary-file-read, jwt-forgery, sandbox-bypass, expression-injection, rce, workflow-automation.webCriticaln8narbitrary-file-readjwt-forgerysandbox-bypassexpression-injectionrceworkflow-automationMicrosoft Semantic Kernel In-Memory Vector Store Filter eval() Sandbox Bypass RCE (CVE-2026-26030)https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-26030-semantic-kernel-eval-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-26030-semantic-kernel-eval-rce/Critical severity — misc · CVE-2026-26030. Status: Weaponized. Affects: Microsoft Semantic Kernel (Python), InMemoryCollection vector store connector. Tags: semantic-kernel, python, eval-injection, sandbox-bypass, prompt-injection, llm-agent, rce, ast-allowlist-bypass, vector-store.miscCriticalsemantic-kernelpythoneval-injectionsandbox-bypassprompt-injectionllm-agentrceast-allowlist-bypassvector-storeMath.js Expression Parser Sandbox Bypass RCE (CVE-2026-40897)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40897-mathjs-sandbox-bypass-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40897-mathjs-sandbox-bypass-rce/Critical severity — web · CVE-2026-40897. Status: Weaponized. Affects: Math.js expression parser (Node.js library). Tags: mathjs, nodejs, sandbox-bypass, rce, expression-parser, prototype-pollution-adjacent, reverse-shell, javascript.webCriticalmathjsnodejssandbox-bypassrceexpression-parserprototype-pollution-adjacentreverse-shelljavascriptlocal-mcp exec Tool Sandbox/Restriction Bypass (CVE-2026-6130)https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-6130-local-mcp-exec-sandbox-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-6130-local-mcp-exec-sandbox-bypass/Medium severity — misc · CVE-2026-6130. Status: PoC. Affects: local-mcp (zero-dependency MCP server for local file operations, v1.1.1). Tags: mcp, model-context-protocol, sandbox-bypass, command-execution, exec-restriction-bypass.miscMediummcpmodel-context-protocolsandbox-bypasscommand-executionexec-restriction-bypass