CVE Intelligence

Th0rgal vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Th0rgal products: 1 record(s), with severity, exploitation and fixes.

Sandboxed.sh 1

Exploited only (KEV) →

CVE-2026-109569 High · 8.8 CWE-1188 Oct 12, 2026
sandboxed.sh through 1.3.0 Container Escape via nsenter Missing Root Namespace
sandboxed.sh through 1.3.0 contains a container escape vulnerability that allows code in container workspaces to access the host filesystem because nsenter attaches without --root. Agent-run code in a container workspace can resolve absolute paths on the host to read and modify host files, bypassing documented isolation.