#escape


n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process

Jul 27, 2026 // 16:10

n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security […]

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

Jul 23, 2026 // 16:30

Cybersecurity researchers have uncovered a sandbox escape vulnerability in Anthropic’s Claude Cowork that makes it possible to break out of the confines of a Linux […]

15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros

Jul 8, 2026 // 09:19

Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been […]

New Januscape Linux flaw allows VM escape on Intel, AMD devices

Jul 7, 2026 // 15:17

A 16-year-old Linux kernel vulnerability, dubbed Januscape, allows attackers to escape a virtual machine and execute arbitrary code on the host. According to Hyunwoo Kim, […]

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems

Jul 6, 2026 // 21:56

A use-after-free bug in Linux’s KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that […]

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

Jul 2, 2026 // 02:17

Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor’s safety sandbox and run any command […]

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

Jul 1, 2026 // 17:47

Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor’s safety sandbox and run any command […]

vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code Execution

May 7, 2026 // 10:54

A dozen critical security vulnerabilities have been disclosed in the vm2 Node.js library that could be exploited by bad actors to break out of the […]

Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape

Apr 22, 2026 // 10:21

A critical security vulnerability has been disclosed in a Python-based sandbox called Terrarium that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-5752, […]