{"data":{"id":"96e92dc5-0861-4552-9dc5-21f4f2b57e59","title":"GHSA-27vp-2mmc-vmh3: nono: Sandbox escape on Linux via D-Bus: `systemd-run --user`","summary":"The nono CLI policy layer and its bundled sandbox profiles, which use Landlock and seccomp, allow sandboxed processes to reach local Unix domain sockets, both concrete and abstract. A process inside the sandbox can call systemd-run --user through the per-user systemd D-Bus socket to run commands outside the sandbox, such as writing files anywhere the user can write. The maintainer notes this does not grant privilege escalation or cross-user access beyond the launching user's existing permissions.","solution":"Fixed in the repository, pending release: support for restricting this behavior has been added.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-27vp-2mmc-vmh3","publishedAt":"2026-05-28T19:55:40.000Z","cveId":"CVE-2026-47128","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["nono-cli@< 0.55.0 (fixed: 0.55.0)"],"affectedPackageNames":["nono-cli"],"affectedPackageRefs":["cargo:nono-cli"],"affectedVendors":[],"affectedVendorsRaw":["nono","Aider","Claude Code","OpenCode"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0013,"epssCheckedAt":"2026-10-14T12:12:42.913Z","kevDateAdded":null,"advisoryAliases":["GHSA-27vp-2mmc-vmh3"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-28T19:55:40.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}