SecurityFan score 21 · Tier C2 sources
CPython sandbox escape
The Brief
- Runsybil reported a sandbox escape vulnerability in CPython, according to an oss-security post by Alan Coopersmith dated 2026-11-05.
- The post says the reporter was not successful in getting the issue reported as a security issue; full details are only in the linked Runsybil blog post.
- Sam James replied to the thread on the same day with a link to an unrelated LWN article; the sources give no severity, affected versions, or fix.
Why it matters
Sandbox escapes can let code break out of restricted Python execution, so teams that rely on CPython sandboxing for untrusted code should watch for an advisory and fix. The sources do not yet confirm which versions are affected.
Who’s affected
- Teams running CPython to execute untrusted code or in sandboxed environments
- #cpython
- #python
- #sandbox-escape
- #security
- #vulnerability
Posted by Alan Coopersmith on Nov 05 https://www.runsybil.com/blog/cpython-0-day-vulnerabilities-threaten-the-ai-supply-chain reports on a sandbox escape it found in CPython: (See the above URL for full details.) They were not successful in reporting it as a security…
Timeline
CPython sandbox escape reported on the oss-security list by Alan Coopersmith
Open Source Security
CPython sandbox escape · +1 reply
Full coverage · 2 sources
- 21h ago ↗
Open Source Security
Re: CPython sandbox escape - 22h ago ↗
Open Source Security
CPython sandbox escape