CVE-2026-97693

Name of the Vulnerable Software and Affected Versions Yuxi versions 0.6.0.beta1 through 0.7.0

Description Insufficient isolation between execution-capable Docker sandboxes and trusted application services allows a low-privileged authenticated user to access other tenants' sandbox APIs, files, and secrets. An attacker can execute commands in active sandboxes and use the unauthenticated provisioner to enumerate, create, or delete sandboxes without requiring administrator, database, or MinIO credentials. Additionally, sandboxes can access shared internal services. If default service credentials are unchanged, an attacker may use them; specifically, if the exposed PostgreSQL account has superuser privileges, command execution within the PostgreSQL container is possible. These issues can lead to the disclosure or modification of cross-tenant data and sandbox states, or result in a denial of service through sandbox deletion.

Recommendations Update to version 0.7.1. Rotate persisted PostgreSQL, Neo4j, or MinIO credentials that were previously set to documented or shipped defaults.