TI-2026-56058 CVE-2026-81096 · GHSA-rg68-wg77-c3wm
ToolUniverse through 1.2.6 Unauthenticated Remote Code Execution via python_code_executor Sandbox Escape
Priority MEDIUM 50
ToolUniverse ran caller-supplied Python inside a sandbox that could be escaped, on a server that required no authentication.