PT-2025-49149
CVE-2025-66479
·
Published
2025-12-04
·
Updated
2026-10-18
Description by
CVSS 4.0
1.8
LowMetricsAV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Anthropic Sandbox Runtime versions prior to 0.0.16
Description
Anthropic Sandbox Runtime is a sandboxing tool designed to enforce filesystem and network restrictions on processes. Prior to version 0.0.16, a flaw in the sandboxing logic allowed sandboxed code to potentially make network requests outside of the intended sandbox environment if the sandbox policy did not define any allowed domains. This occurred because the network sandbox was not properly enforced in such scenarios.
Recommendations
Update to version 0.0.16 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾