https://poc.intelseclab.com/tags/sandbox-escape/Latest proof-of-concept entries.Hugoen-usMon, 27 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-27_cve-2026-53753-crawl4ai-sandbox-escape-rce/Mon, 27 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-27_cve-2026-53753-crawl4ai-sandbox-escape-rce/Critical severity (CVSS 9.8) — web · CVE-2026-53753 (GHSA-qxjp-w3pj-48m7). Status: Weaponized — full end-to-end command execution reproduced against the official unclecode/crawl4ai:0.8.6 image. Affects: Crawl4AI — open-source LLM-friendly web crawler/scraper, Docker API server. Tags: crawl4ai, sandbox-escape, rce, python, ast-bypass, unauthenticated, llm-tooling, ai-security.webCriticalcrawl4aisandbox-escapercepythonast-bypassunauthenticatedllm-toolingai-securityhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33712-typebot-ssrf/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33712-typebot-ssrf/High severity — web · CVE-2026-33712. Status: PoC. Affects: Typebot (open-source chatbot builder), preview chat endpoint. Tags: ssrf, typebot, isolated-vm, sandbox-escape, cloud-metadata, node-js, unauthenticated, chatbot.webHighssrftypebotisolated-vmsandbox-escapecloud-metadatanode-jsunauthenticatedchatbothttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44789-n8n-prototype-pollution-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44789-n8n-prototype-pollution-rce/Critical severity (CVSS 9.4) — web · CVE-2026-44789 / GHSA-c8xv-5998-g76h. Status: PoC. Affects: n8n (workflow automation platform). Tags: n8n, prototype-pollution, rce, node-options, sandbox-escape, task-runner, workflow-automation.webCriticaln8nprototype-pollutionrcenode-optionssandbox-escapetask-runnerworkflow-automationhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40217-litellm-guardrail-sandbox-escape/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-40217-litellm-guardrail-sandbox-escape/Critical severity (CVSS 8.8) — web · CVE-2026-40217 (X41-2026-001, GHSA-3926-2jvf-fg29). Status: PoC. Affects: LiteLLM (open-source LLM proxy/gateway), POST /guardrails/test_custom_code endpoint. Tags: litellm, llm-proxy, sandbox-escape, bytecode-manipulation, cwe-913, docker, root-rce, authenticated.webCriticallitellmllm-proxysandbox-escapebytecode-manipulationcwe-913dockerroot-rceauthenticatedhttps://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25526-jinjava-ssti-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-25526-jinjava-ssti-rce/Critical severity — web · CVE-2026-25526. Status: Weaponized. Affects: Jinjava (HubSpot's Java Jinja-like template engine). Tags: ssti, jinjava, java, jackson, objectmapper, sandbox-escape, rce, deserialization.webCriticalsstijinjavajavajacksonobjectmappersandbox-escapercedeserializationhttps://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-28995-ios-appintents-path-traversal/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-28995-ios-appintents-path-traversal/High severity — misc · CVE-2026-28995. Status: PoC. Affects: Apple App Intents framework (iOS). Tags: ios, app-intents, path-traversal, sandbox-escape, swift, file-disclosure, mobile.miscHighiosapp-intentspath-traversalsandbox-escapeswiftfile-disclosuremobilehttps://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-3462-acrobat-pdf-exploit-generator/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-3462-acrobat-pdf-exploit-generator/Critical severity — misc · CVE-2026-3462 (repo internally references CVE-2026-34621 — CVE-ID mismatch, see Notes). Status: Weaponized. Affects: Adobe Acrobat / Acrobat Reader (DC Continuous and 2024 Classic tracks). Tags: pdf, exploit-generator, prototype-pollution, sandbox-escape, evasion, persistence, malware-generator, farmed-repo-suspected.miscCriticalpdfexploit-generatorprototype-pollutionsandbox-escapeevasionpersistencemalware-generatorfarmed-repo-suspectedhttps://poc.intelseclab.com/pocs/binary/2026-07-03_lunar-client-modrinth-rce-chain/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-03_lunar-client-modrinth-rce-chain/Critical severity (CVSS 3.1) — binary · None assigned as of 2026-07-03. Status: Incomplete PoC. Affects: Lunar Client (Electron desktop application), Modrinth Explore integration. Tags: lunar-client, electron, minecraft, modrinth, raw-html-injection, ipc, rce, sandbox-escape, launcher-abuse.binaryCriticallunar-clientelectronminecraftmodrinthraw-html-injectionipcrcesandbox-escapelauncher-abusehttps://poc.intelseclab.com/pocs/web/2026-07-03_ladybird-wasm-esm-host-function-rce/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-03_ladybird-wasm-esm-host-function-rce/Critical severity — web · None assigned as of 2026-07-03. Status: Weaponized. Affects: Ladybird web browser (WebContent process, LibWeb / LibWasm). Tags: ladybird, browser, webassembly, wasm-gc, use-after-free, memory-corruption, rce, javascript-engine, sandbox-escape.webCriticalladybirdbrowserwebassemblywasm-gcuse-after-freememory-corruptionrcejavascript-enginesandbox-escapehttps://poc.intelseclab.com/pocs/binary/2026-05-16_adobe-acrobat-prototype-pollution-sandbox-escape/Sat, 16 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-05-16_adobe-acrobat-prototype-pollution-sandbox-escape/Critical severity (CVSS 9.8) — binary · CVE-2026-34621. Status: Weaponized. Affects: Adobe Acrobat DC / Adobe Acrobat Reader DC / Adobe Acrobat 2024 JavaScript engine sandbox boundary. Tags: prototype-pollution, sandbox-escape, Adobe-Acrobat, Adobe-Reader, PDF, RCE, Windows, macOS, user-interaction.binaryCriticalprototype-pollutionsandbox-escapeAdobe-AcrobatAdobe-ReaderPDFRCEWindowsmacOSuser-interaction