CWE-653.

Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass

• Apache Software Foundation Apache Syncope
• CWE-653

Apache Syncope: Remote Code Execution via Flowable JUEL expression

• Apache Software Foundation Apache Syncope
• CWE-653

Beta9 build sandbox escape via chroot-only isolation

• beam-cloud Beta9 worker
• Privilege escalation
• CWE-653

n8n before 2.42.6, 2.43.3 and 3.0.1 Code Execution Outside Task Runner Isolation via Deprecated Function Nodes

• n8n
• CWE-653

Unrestricted network access between execution contexts in KNIME Business Hub

• KNIME Business Hub
• CWE-653

Incorrect authorization checks in Amazon Athena engine version 3 query processing

• AWS Amazon Athena
• Broken access control
• CWE-653

JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell

• jd-opensource JoySafeter
• CWE-653

LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge

• ginlix-ai LangAlpha
• CWE-653

**Container Escape** Host user home directory mounted with write access into application container

• QNAP Systems Inc. Notes Station 3
• CWE-653

Astron Agent: Unsandboxed code-node leads to cross-tenant RCE

• iflytek astron-agent
• Code injection
• Authentication bypass

Ghost: Stored XSS via Embed Card Previews

• Cross-site scripting (XSS)
• CWE-653

>=6.34.0, <6.67.0 · fixed in 6.67.0

Cisco NX-OS Software Python Sandbox Escape Vulnerability

• Cisco NX-OS Software
• CWE-653

OpenBSD OpenSSH: In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect…

• OpenBSD OpenSSH
• CWE-653

vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

• Information disclosure
• CWE-653

<3.11.7 · fixed in 3.11.7

Trigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure Compromise

• CWE-653
• CWE-1393

<4.5.6 · fixed in 4.5.6

Kiteworks Core Sandbox Escape

• Kiteworks Core
• Information disclosure
• CWE-653

Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• CWE-653

deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation

• deepseek-ai deepseek-harness
• CWE-653

MrSteam iSteamX Improper Isolation or Compartmentalization

• MrSteam iSteamX application
• MrSteam iSteamX Hub
• CWE-653

Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys

• Gen Digital Avast Free Antivirus, Avast One, Avast Premium Security, Avast Ultimate, Avast Business Security
• Gen Digital AVG Antivirus Free, AVG Internet Security, AVG Ultimate
• Broken access control
• CWE-281

vivo Kids Mode: A control logic defect in a specific built-in webpage of Kids Mode allows users to view…

• vivo Kids Mode
• CWE-653

Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef

• Broken access control
• CWE-653

<=1.7.34 · no fixed version yet

Kamaji: TenantControlPlane namespace/name collision binds two tenants to the same SQL datastore schema + DB user, breaking per-tenant isolation

• clastix kamaji
• Broken access control
• CWE-653

Boruta dynamic client registration allows creation of over-privileged OAuth clients

• CWE-653

>=2.3.0, <2.3.7 · fixed in 2.3.7

Apache Syncope: Remote Code Execution via Scripted Connector

• Apache Software Foundation Apache Syncope
• CWE-653

Apache Syncope: Remote Code Execution via Flowable BPMN Groovy ScriptTask

• Apache Software Foundation Apache Syncope
• CWE-653

Apache Syncope: RCE via Groovy Sandbox bypass

• Apache Software Foundation Apache Syncope
• CWE-653

Cross-namespace traffic interception via incorrect route precedence ordering in AWS Load Balancer Controller

• Amazon aws-load-balancer-controller
• CWE-653

npm PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients

• CWE-653
• CWE-693

>=1.2.3, <1.7.2 · fixed in 1.7.2

Sandbox escape due to incorrect boundary conditions in the Networking component

• Mozilla Firefox
• Mozilla Thunderbird
• Memory corruption
• CWE-653

Sandbox escape in the DOM: Navigation component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-653
• CWE-693

GPU DDK - SharedSecMem mapped into all GPU virtual address spaces

• Imagination Technologies Graphics DDK
• CWE-653

Apache Syncope has an Improper Isolation or Compartmentalization vulnerability

• CWE-653

>=3.0.0-M0, <=3.0.16 || >=4.0.0-M0, <4.0.6 || >=4.1.0-M0, <4.1.1 · fixed in 4.0.6, 4.1.1

Sandbox escape in Firefox and Firefox Focus for Android

• Mozilla Firefox
• CWE-653
• CWE-693

Sandbox escape in the Profile Backup component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-653
• CWE-693

vm2 has Sandbox Breakout Through Null Proto Exception

• Information disclosure
• CWE-653

<3.11.2 · fixed in 3.11.2

vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape

• Code injection
• Prototype pollution

>=3.9.6, <3.11.0 · fixed in 3.11.0

vm2 Access to Host Object Enables Sandbox Escape

• Code injection
• CWE-653

<3.11.0 · fixed in 3.11.0

VM2 Has a WASM Sandbox Escape

• Code injection
• CWE-653

<3.10.5 · fixed in 3.10.5

VM2 Has a Sandbox Escape Issue via SuppressedError

• Code injection
• CWE-653

<3.11.0 · fixed in 3.11.0

VM2 Has Sandbox Breakout Through Inspect Function

• Code injection
• CWE-653

<3.11.0 · fixed in 3.11.0

Spring gRPC SecurityContext leaks across requests upon authorization failure

• CWE-653

<1.0.3 · fixed in 1.0.3

Traefik Kubernetes CRD allows unauthorized cross-namespace middleware binding

• Broken access control
• CWE-653

<=1.7.34 · no fixed version yet

A new API endpoint introduced in pretix 2025 that is supposed to

• CWE-653

>=2025.10.0, <2026.1.2 || >=2026.2.0, <2026.2.1 || >=2026.3.0, <2026.3.1 · fixed in 2026.1.2, 2026.2.1, 2026.3.1

API allows deletion of users of other instance

• pretix Venueless
• CWE-653

Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes

• CWE-653

<38.8.6 || >=39.0.0-alpha.1, <39.8.4 || >=40.0.0-alpha.1, <40.8.4 || >=41.0.0-alpha.1, <41.0.0 · fixed in 38.8.6, 39.8.4, 40.8.4, 41.0.0

Keycloak: Replay of action tokens via improper handling of single-use entries

• CWE-653

<26.5.7 · fixed in 26.5.7

Keycloak: Privilege escalation via forged authorization codes due to SingleUseObjectProvider isolation flaw

• CWE-653

<26.5.7 · fixed in 26.5.7

Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI (RHOAI)
• CWE-653

Sandbox escape in the Responsive Design Mode component

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-653

Remote Code Execution in ServiceNow AI Platform

• ServiceNow AI Platform
• CWE-653

MCP Run Python has a Sandbox Escape & Server Takeover Vulnerability

• CWE-653

<=0.0.22 · no fixed version yet

Network boundaries not respected in certain Foundry namespaces.

• com.palantir.compute:compute-service
• com.palantir.codeassist2:code-assist-proxy
• CWE-653

Fortinet FortiSandbox: An Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet…

• Fortinet FortiSandbox
• CWE-653

Incorrect oauth passthrough in Grafana Databricks Datasource

• Grafana Labs Grafana Databricks Datasource Plugin
• CWE-653

Incorrect oauth passthrough in Grafana Snowflake Datasource

• Grafana Labs Grafana Snowflake Datasource Plugin
• CWE-653

DSPy does not properly restrict file reads

• CWE-653

<=3.0.3 · no fixed version yet

Apache Syncope allows malicious administrators to inject Groovy code

• CWE-653

<3.0.14 || >=4.0.0-M0, <4.0.2 · fixed in 3.0.14, 4.0.2

Vasion Print (formerly PrinterLogic) Lack of Network Segmentation Between Docker Instances

• Vasion Print Virtual Appliance Host
• Vasion Print Application
• CWE-653

Intel(R) Processors: Improper Isolation or Compartmentalization in the stream cache mechanism for some…

• Intel(R) Processors
• CWE-653