CVE-2025-66479: Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing
Due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the sandbox policy did not configure any allowed domains. This could allow sandboxed code to make network requests outside of the sandbox. A patch for this was released in v0.0.16.
Thank you to https://github.com/bendrucker for reporting this issue!
References
- github.com/advisories/GHSA-9gqj-5w7c-vx47
- github.com/anthropic-experimental/sandbox-runtime
- github.com/anthropic-experimental/sandbox-runtime/commit/bea2930cc1db9c73a1b15acf6dc19c5261aec1f3
- github.com/anthropic-experimental/sandbox-runtime/security/advisories/GHSA-9gqj-5w7c-vx47
- nvd.nist.gov/vuln/detail/CVE-2025-66479
Code Behaviors & Features
Detect and mitigate CVE-2025-66479 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →