Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Skyvern-AI Clear all filters
TI-2026-85963 CVE-2026-123783 · GHSA-2555-vffj-g73c

Sandbox bypass in Skyvern script execution lets users run code on server

Priority LOW 38

Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00557 Published 2026-11-06 No fix listed CWE-184
TI-2026-56844 CVE-2026-82447 · GHSA-57gg-9j2p-5v4x

Skyvern before 1.0.45 Sandbox Escape via TextPromptBlock

Priority MEDIUM 41

Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through an unsandboxed environment.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00775 Published 2026-08-29 Fixed in 1.0.45 CWE-1336