PT-2026-61798 · Pypi · Praisonai
CVE-2026-57144
·
Published
2026-06-18
·
Updated
2026-07-23
CVSS v3.1
8.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
praisonai versions 4.5.110 through 4.6.58
Description
SandlockSandbox is designed as a kernel-enforced sandbox for untrusted code, allowing configuration of allowed filesystem paths and network restrictions via SandboxConfig.native(). However, on systems where the sandlock module is present but Landlock is unavailable, the execute() and run command() functions fail open by silently falling back to SubprocessSandbox. This fallback does not enforce the configured filesystem or network boundaries, enabling a sandboxed payload to read files outside the allowed paths and establish network connections even when network=False is specified. This allows potential access to sensitive host files, credentials, and internal services.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary workaround, avoid using
SandlockSandbox on systems where Landlock support is unavailable to prevent silent fallback to an unprivileged subprocess.Exposure of Resource to Wrong Sphere
Protection Mechanism Failure
Incorrect Privilege Assignment
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Praisonai