CVE-2026-57144

Name of the Vulnerable Software and Affected Versions praisonai versions 4.5.110 through 4.6.58

Description SandlockSandbox is designed as a kernel-enforced sandbox for untrusted code, allowing configuration of allowed filesystem paths and network restrictions via SandboxConfig.native(). However, on systems where the sandlock module is present but Landlock is unavailable, the execute() and run command() functions fail open by silently falling back to SubprocessSandbox. This fallback does not enforce the configured filesystem or network boundaries, enabling a sandboxed payload to read files outside the allowed paths and establish network connections even when network=False is specified. This allows potential access to sensitive host files, credentials, and internal services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, avoid using SandlockSandbox on systems where Landlock support is unavailable to prevent silent fallback to an unprivileged subprocess.