CVE-2025-9959: smolagents Python Sandbox Escape
https://t.co/SXF1s3SNJG
Python sandbox implementations often focus on blocking dangerous attribute access patterns like `obj.__class__` but forget that the same introspection is achievable through method invocation.
#python#cve
We've published our writeup of CVE-2024-20693, a vulnerability in Windows that allowed spoofing the code signature of binaries by placing them on an SMB share. This research originally was about something different, but we ran into a signature check...
https://t.co/NXpMN4DNQz