CVE-2025-66479— Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-66479
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing
Source: NVD (National Vulnerability Database)
Vulnerability Description
Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the sandbox policy did not configure any allowed domains. This could allow sandboxed code to make network requests outside of the sandbox. A patch for this was released in v0.0.16.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
保护机制失效
Source: NVD (National Vulnerability Database)
Vulnerability Title
Anthropic Sandbox Runtime 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Anthropic Sandbox Runtime是Anthropic-experimental开源的一个轻量级的沙盒工具。 Anthropic Sandbox Runtime 0.0.16之前版本存在安全漏洞，该漏洞源于沙箱逻辑错误，可能导致网络请求绕过沙箱。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| anthropic-experimental | sandbox-runtime | < 0.0.16 | - |
II. Public POCs for CVE-2025-66479
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-66479
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same weakness: CWE-693
- CVE-2026-26956
vm2: WASM Sandbox Escape (Node 25 only) - CVE-2026-24120
vm2: Sandbox Breakout Through Promise Species - CVE-2026-41316
ERB has an @_init deserialization guard bypass via def_modul - CVE-2026-41469
Beghelli Sicuro24 SicuroWeb Missing Content Security Policy - CVE-2026-40604
ClearanceKit: opfilter system extension can be suspended or
V. Comments for CVE-2025-66479
No comments yet