PT-2025-49149

CVE-2025-66479

·

Published

2025-12-04

·

Updated

2026-10-18

Description by

CVSS 4.0
1.8
Low
MetricsAV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Anthropic Sandbox Runtime versions prior to 0.0.16
Description Anthropic Sandbox Runtime is a sandboxing tool designed to enforce filesystem and network restrictions on processes. Prior to version 0.0.16, a flaw in the sandboxing logic allowed sandboxed code to potentially make network requests outside of the intended sandbox environment if the sandbox policy did not define any allowed domains. This occurred because the network sandbox was not properly enforced in such scenarios.
Recommendations Update to version 0.0.16 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-9GQJ-5W7C-VX47
Found an issue in the description? Have something to add? Feel free to write us 👾