1.8 LowCWE-693
CVE-2025-66479
anthropic-experimental sandbox-runtime vulnerability
anthropic-experimentalsandbox-runtime
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 16 Oct
0.2%probability of exploitation in the next 30 days
Higher than 5% of scored CVEs
SeverityCVSS
1.8Low
Description NVD
Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the sandbox policy did not configure any allowed domains. This could allow sandboxed code to make network requests outside of the sandbox. A patch for this was released in v0.0.16.
Coverage 1 article · 1 outlet
- Anthropic Silently Patches Claude Code Sandbox BypassSecurityWeek · first in our coverage