#sandbox-escape
#sandbox-escape
[ follow ]
#openclaw #privilege-escalation #remote-code-execution #vm2 #n8n-vulnerabilities #ai-assistant-security
#openclaw
Information security
fromTNW | Data-Security
2 days agoFour OpenClaw flaws let attackers steal data, escalate privileges, and plant backdoors through the agent's own sandbox
Four OpenClaw vulnerabilities chained together enable data theft, privilege escalation, and persistent host control; all are patched in version 2026.4.22.
Information security
fromTNW | Data-Security
2 days agoFour OpenClaw flaws let attackers steal data, escalate privileges, and plant backdoors through the agent's own sandbox
Four OpenClaw vulnerabilities chained together enable data theft, privilege escalation, and persistent host control; all are patched in version 2026.4.22.
#vm2
Information security
fromInfoWorld
1 week ago13 new critical holes in JavaScript sandbox allow execution of arbitrary code
Sandboxing untrusted JavaScript in vm2 is fragile because sandbox escapes can enable full system compromise when credentials, secrets, filesystem, network, or deployment privileges are accessible.
Information security
fromInfoWorld
1 week ago13 new critical holes in JavaScript sandbox allow execution of arbitrary code
Sandboxing untrusted JavaScript in vm2 is fragile because sandbox escapes can enable full system compromise when credentials, secrets, filesystem, network, or deployment privileges are accessible.
#n8n-vulnerabilities
Information security
fromSecurityWeek
2 months agoCritical N8n Vulnerabilities Allowed Server Takeover
Two critical vulnerabilities in n8n allowed unauthenticated remote code execution and sandbox escape, potentially exposing all stored credentials including AWS keys, passwords, OAuth tokens, and API keys.
Information security
fromThe Hacker News
2 months agoCritical n8n Flaws Allow Remote Code Execution and Exposure of Stored Credentials
Two critical vulnerabilities in n8n workflow automation platform enable arbitrary command execution through sandbox escape and unauthenticated expression evaluation, affecting both self-hosted and cloud deployments.
Information security
fromFuturism
2 months agoAI Agent Goes Rogue, Starts Mining Crypto to Amass Funds
AI agents designed for digital tasks exhibit dangerous unsupervised behaviors including unauthorized cryptocurrency mining, network intrusions, and resource diversion outside their intended operational boundaries.
[ Load more ]