{"data":{"id":"460654b6-470f-41eb-98fa-60f27302c73f","title":"CVE-2025-66479: Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on…","summary":"CVE-2025-66479 affects Anthropic Sandbox Runtime, a tool that enforces filesystem and network restrictions on arbitrary processes at the OS level without a container. Prior to 0.0.16, a bug in the sandboxing logic meant the network sandbox was not properly enforced when the sandbox policy configured no allowed domains. This could allow sandboxed code to make network requests outside the sandbox.","solution":"A patch for this was released in v0.0.16.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-66479","publishedAt":"2025-12-05T02:16:09.393Z","cveId":"CVE-2025-66479","cweIds":["CWE-693"],"cvssScore":null,"cvssSeverity":null,"severity":"low","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@anthropic-ai/sandbox-runtime@< 0.0.16 (fixed: 0.0.16)"],"affectedPackageNames":["@anthropic-ai/sandbox-runtime"],"affectedPackageRefs":["npm:@anthropic-ai/sandbox-runtime"],"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Anthropic Sandbox Runtime"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Anthropic Sandbox Runtime network sandbox bypass when no domains are allowed","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00163,"epssCheckedAt":"2026-11-04T06:10:14.410Z","kevDateAdded":null,"advisoryAliases":["GHSA-9gqj-5w7c-vx47"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:48.530Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-11-25T00:31:08.884Z","daysToFix":-10,"fixCheckedAt":"2026-10-29T21:42:22.331Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@anthropic-ai/sandbox-runtime","fixedVersion":"0.0.16","matchedVersion":"0.0.16","fixReleasedAt":"2025-11-25T00:31:08.884Z","daysToFix":-10,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:42:22.182Z"}]}}