Read the docs

Skyvern-AI

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Skyvern-AI records in CISA KEV

No Skyvern-AI vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-56844 CVE-2026-82447 · GHSA-57gg-9j2p-5v4x

Skyvern before 1.0.45 Sandbox Escape via TextPromptBlock

Priority MEDIUM 41

Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through an unsandboxed environment.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00775 Published 2026-08-29 Fixed in 1.0.45 CWE-1336
TI-2026-85963 CVE-2026-123783 · GHSA-2555-vffj-g73c

Sandbox bypass in Skyvern script execution lets users run code on server

Priority LOW 38

Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00557 Published 2026-11-06 No fix listed CWE-184
Open these records in search →