TI-2026-71299 CVE-2026-109569 · GHSA-xqq7-hjvp-gg2f
Container escape in sandboxed.sh lets workspace code read host files
Priority MEDIUM 41
sandboxed.sh through 1.3.0 contains a container escape vulnerability that allows code in container workspaces to access the host filesystem because nsenter attaches without --root.