Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
cloudflare/sandbox-sdk
main @ 696388b
41
Fixes
0
CVEs
CRITICAL
Peak severity
51.4%
Coverage
Highlights
Denial of Service: 19 prior fixes. Scrutinize any change in this area.
packages/sandbox-container/src/session.ts: most-fixed (6 issues). Treat as high-risk during review.
15 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Sandbox Escape: Sandboxed processes were previously able to access host control plane processes, system secrets, and local ports due to a lack of process namespace isolation. Implementing unshare-based PID namespace isolation was required to prevent escape.
Command Injection: Insufficently sanitized arguments and payloads passed into container shells (like writing file contents or executing session environment setup) allowed arbitrary command execution in the context of the runner.
Auth Bypass: Custom token validation flaws and race conditions during port exposure (exposePort/unexposePort) permitted routing bypasses and unauthorized container port access before proper token revocation.