CWE-265 · Access Control
Privilege Issues
15CVEs
SortMost likely exploited
15 CVEs with CWE-265 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-1889A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a re…Facebook · WhatsApp Desktop · 2020-09-03 | – | 4.8% | 2020-09-03 |
| CVE-2023-26122All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype pollution exploitation. Expl…Safe-Eval Project · safe-eval · CVSS 8.8 · 2023-04-11 | 8.8 | 2.1% | 2023-04-11 |
| CVE-2023-5223HimitZH HOJ Topic sandboxHimitZH · HOJ · CVSS 6.3 · 2023-09-27 | 6.3 | 1.0% | 2023-09-27 |
| CVE-2025-5321aimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalationaimhubio · aim · CVSS 6.3 · 2025-05-29 | 6.3 | 0.6% | 2025-05-29 |
| CVE-2026-18593vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandboxvxcontrol · PentAGI · CVSS 5.6 · 2026-08-03 | 5.6 | 0.4% | 2026-08-03 |
| CVE-2026-14784vxcontrol PentAGI Docker API client.go sandboxvxcontrol · PentAGI · CVSS 6.3 · 2026-07-06 | 6.3 | 0.4% | 2026-07-06 |
| CVE-2026-9368NousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandboxNousResearch · hermes-agent · CVSS 7.3 · 2026-05-24 | 7.3 | 0.4% | 2026-05-24 |
| CVE-2026-6878ByteDance verl grader.py math_equal sandboxByteDance · verl · CVSS 5.6 · 2026-04-23 | 5.6 | 0.3% | 2026-04-23 |
| CVE-2026-6224nocobase plugin-workflow-javascript Vm.js createSafeConsole sandboxnocobase · plugin-workflow-javascript · CVSS 7.3 · 2026-04-13 | 7.3 | 0.3% | 2026-04-13 |
| CVE-2026-116367DeepSeek Harness sandbox.ts createContextDeepSeek · Harness · CVSS 6.3 · 2026-10-26 | 6.3 | 0.3% | 2026-10-26 |
| CVE-2024-2007OpenBMB XAgent Privileged Mode sandboxOpenBMB · XAgent · CVSS 5.3 · 2024-02-29 | 5.3 | 0.3% | 2024-02-29 |
| CVE-2025-5874Redash getattr python.py run_query sandboxRedash · CVSS 4.6 · 2025-06-09 | 4.6 | 0.3% | 2025-06-09 |
| CVE-2026-6117AstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandboxAstrBotDevs · AstrBot · CVSS 6.3 · 2026-04-12 | 6.3 | 0.2% | 2026-04-12 |
| CVE-2026-101102deepseek-ai deepseek-harness Code Mode Sandbox run_code sandboxdeepseek-ai · deepseek-harness · CVSS 6.3 · 2026-09-28 | 6.3 | 0.2% | 2026-09-28 |
| CVE-2026-108788deepseek-ai deepseek-harness Sandbox spawn sandboxdeepseek-ai · deepseek-harness · CVSS 5.3 · 2026-10-12 | 5.3 | 0.1% | 2026-10-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.