{"data":{"id":"238f5682-e76a-415b-82f9-2a03e1eb5993","title":"CPython flaw exposes AI inference servers to sandbox escape attacks","summary":"RunSybil researchers report a memory-safety flaw in CPython that lets a malicious AI model's chat_template.jinja escape the Jinja sandbox and execute arbitrary code in inference servers such as vLLM. They demonstrated it with a backdoored Qwen2.5-0.5B-Instruct model and shared proof-of-concept exploits with inference providers offering bring-your-own-model features. The Python Security Response Team disputes that the demonstrated sandbox escape is a CPython vulnerability, saying untrusted code execution inside a sandbox is outside CPython's threat model.","solution":"N/A -- no mitigation discussed in source.","labels":["security","safety"],"sourceUrl":"https://www.csoonline.com/article/4245592/cpython-flaw-exposes-ai-inference-servers-to-sandbox-escape-attacks.html","publishedAt":"2026-11-06T11:14:26.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["supply_chain","jailbreak"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["vLLM","Qwen2.5-0.5B-Instruct","Jinja","CPython","Hugging Face"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-06T11:14:26.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010","AML.T0054"]}}