Privilege Issues

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a re…CVE-2020-1889Facebook · 4.8% likely

   Meta (Facebook)

2. All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype pollution exploitation. Expl…CVE-2023-26122Safe-Eval Project · CVSS 8.8 · 2.1% likely
3. HimitZH HOJ Topic sandboxCVE-2023-5223HimitZH · CVSS 6.3 · 1.0% likely
4. aimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalationCVE-2025-5321aimhubio · CVSS 6.3 · 0.6% likely

   Aimhubio

5. vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandboxCVE-2026-18593vxcontrol · CVSS 5.6 · 0.4% likely
6. vxcontrol PentAGI Docker API client.go sandboxCVE-2026-14784vxcontrol · CVSS 6.3 · 0.4% likely
7. NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandboxCVE-2026-9368NousResearch · CVSS 7.3 · 0.4% likely

   NousResearch

8. ByteDance verl grader.py math_equal sandboxCVE-2026-6878ByteDance · CVSS 5.6 · 0.3% likely

   ByteDance

9. nocobase plugin-workflow-javascript Vm.js createSafeConsole sandboxCVE-2026-6224nocobase · CVSS 7.3 · 0.3% likely

   Nocobase

10. DeepSeek Harness sandbox.ts createContextCVE-2026-116367DeepSeek · CVSS 6.3 · 0.3% likely

    DeepSeek

11. OpenBMB XAgent Privileged Mode sandboxCVE-2024-2007OpenBMB · CVSS 5.3 · 0.3% likely

    OpenBMB

12. Redash getattr python.py run_query sandboxCVE-2025-5874Redash · CVSS 4.6 · 0.3% likely
13. AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandboxCVE-2026-6117AstrBotDevs · CVSS 6.3 · 0.2% likely

    AstrBotDevs

14. deepseek-ai deepseek-harness Code Mode Sandbox run_code sandboxCVE-2026-101102deepseek-ai · CVSS 6.3 · 0.2% likely

    Deepseek-Ai

15. deepseek-ai deepseek-harness Sandbox spawn sandboxCVE-2026-108788deepseek-ai · CVSS 5.3 · 0.1% likely

    Deepseek-Ai

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.