# CWE-265.

Every Advisory and CVE whose sources give the weakness CWE-265, newest first.

## Records, newest first

- [DeepSeek Harness sandbox.ts createContext](https://agentprime.io/advisories/CVE-2026-116367.md)
  `CVE-2026-116367` · CVE record: DeepSeek Harness · CVSS 5.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-264, CWE-265
- [deepseek-ai deepseek-harness Sandbox spawn sandbox](https://agentprime.io/advisories/CVE-2026-108788.md)
  `CVE-2026-108788` · CVE record: deepseek-ai deepseek-harness · CVSS 4.8 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-264, CWE-265
- [deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox](https://agentprime.io/advisories/CVE-2026-101102.md)
  `CVE-2026-101102` · CVE record: deepseek-ai deepseek-harness · CVSS 5.3 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-264, CWE-265
- [vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandbox](https://agentprime.io/advisories/CVE-2026-18593.md)
  `CVE-2026-18593` · CVE record: vxcontrol PentAGI · CVSS 6.3 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-264, CWE-265
- [vxcontrol PentAGI Docker API client.go sandbox](https://agentprime.io/advisories/CVE-2026-14784.md)
  `CVE-2026-14784` · CVE record: vxcontrol PentAGI · CVSS 5.3 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-264, CWE-265
- [hermes-agent has a sandbox issue](https://agentprime.io/advisories/GHSA-wm96-9gfh-vvgq.md)
  `GHSA-wm96-9gfh-vvgq`, `CVE-2026-9368`, `PYSEC-2026-2515` · PyPI `hermes-agent`: affected `<0.11.0`, fixed in `0.11.0` · CVSS 6.9 Medium · Not analysed yet · Published 26 May 2026 · Tags: Privilege escalation, CWE-264, CWE-265, CWE-526
- [verl's math_equal() Vulnerable to Arbitrary Code Execution via Unsafe eval()](https://agentprime.io/advisories/GHSA-h57c-v2v3-5v3v.md)
  `GHSA-h57c-v2v3-5v3v`, `CVE-2026-6878`, `PYSEC-2026-3402` · PyPI `verl`: affected `<=0.7.1`, no fixed version yet · CVSS 6.3 Medium · Not analysed yet · Published 23 Apr 2026 · Tags: Code injection, CWE-264, CWE-265
- [nocobase plugin-workflow-javascript Vm.js createSafeConsole sandbox](https://agentprime.io/advisories/CVE-2026-6224.md)
  `CVE-2026-6224` · CVE record: nocobase plugin-workflow-javascript · CVSS 6.9 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: CWE-264, CWE-265
- [AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandbox](https://agentprime.io/advisories/CVE-2026-6117.md)
  `CVE-2026-6117` · CVE record: AstrBotDevs AstrBot · CVSS 5.3 Medium · Not analysed yet · Published 12 Apr 2026 · Tags: CWE-264, CWE-265
- [Redash getattr python.py run_query sandbox](https://agentprime.io/advisories/CVE-2025-5874.md)
  `CVE-2025-5874` · CVE record: Redash · CVSS 2.1 Low · Not analysed yet · Published 9 Jun 2025 · Tags: CWE-264, CWE-265
- [Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution](https://agentprime.io/advisories/GHSA-gp5h-f9c5-8355.md)
  `GHSA-gp5h-f9c5-8355`, `CVE-2025-5321`, `PYSEC-2026-1088` · PyPI `aim`: affected `<=3.29.1`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 29 May 2025 · Tags: Code injection, CWE-264, CWE-265
- [OpenBMB XAgent Privileged Mode sandbox](https://agentprime.io/advisories/CVE-2024-2007.md)
  `CVE-2024-2007` · CVE record: OpenBMB XAgent · CVSS 5.3 Medium · Not analysed yet · Published 29 Feb 2024 · Tags: CWE-265
- [HimitZH HOJ Topic sandbox](https://agentprime.io/advisories/CVE-2023-5223.md)
  `CVE-2023-5223` · CVE record: HimitZH HOJ · CVSS 6.3 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-265
- [safe-eval vulnerable to Sandbox Bypass due to improper input sanitization](https://agentprime.io/advisories/GHSA-79xf-67r4-q2jj.md)
  `GHSA-79xf-67r4-q2jj`, `CVE-2023-26122` · npm `safe-eval`: affected `<=0.4.2`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 11 Apr 2023 · Tags: Prototype pollution, CWE-265
- [Facebook WhatsApp Desktop: A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could…](https://agentprime.io/advisories/CVE-2020-1889.md)
  `CVE-2020-1889` · CVE record: Facebook WhatsApp Desktop · No CVSS score · Not analysed yet · Published 3 Sept 2020 · Tags: CWE-265

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-265>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-265/>. Everything for agents: <https://agentprime.io/llms.txt>.