Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

anthropics/sandbox-runtime

              main @ c392e6c
            

Fixes

CVEs

CRITICAL

Peak severity

52.8%

Coverage

Highlights

Sandbox Escape: 17 prior fixes. Scrutinize any change in this area.

src/sandbox/linux-sandbox-utils.ts: most-fixed (24 issues). Treat as high-risk during review.

71 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Sandbox Escape: Most frequently fixed class; weaknesses in mount/Seatbelt argument generation regularly let sandboxed code reach denied files/paths.

Access Control Bypass (Network Isolation): Address canonicalization (IPv4-mapped IPv6, embedded IPv4, zone IDs) and dialing behavior repeatedly bypass allow/deny lists, enabling SSRF to loopback or cloud metadata.

Privilege Escalation / Sandbox Escape: Inherited capabilities or weak Windows restricted tokens allowed escape; capability dropping and restricted-token hardening were necessary.