MediumVulnerability
GHSA-27vp-2mmc-vmh3: nono: Sandbox escape on Linux via D-Bus: `systemd-run --user`
- Identifiers
- CVE-2026-47128GHSA-27vp-2mmc-vmh3
- Published
- Record updated
- Affected
- nono-cli < 0.55.0
- Fixed in
- 0.55.0
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.1%
Summary
The nono CLI policy layer and its bundled sandbox profiles, which use Landlock and seccomp, allow sandboxed processes to reach local Unix domain sockets, both concrete and abstract. A process inside the sandbox can call systemd-run --user through the per-user systemd D-Bus socket to run commands outside the sandbox, such as writing files anywhere the user can write. The maintainer notes this does not grant privilege escalation or cross-user access beyond the launching user's existing permissions.
Mitigation
Fixed in the repository, pending release: support for restricting this behavior has been added.
Related items
- MediumCVE-2026-108759: mistral.rs sandbox escape via symlinks in mistralrs-code-execSimilar attack · NVD/CVE Database
- MediumCVE-2026-108575: BerriAI LiteLLM improper authorization in secret resolution via api_keySimilar attack · NVD/CVE Database
- MediumCVE-2026-108574: BerriAI LiteLLM authorization bypass in session spend log view via session_idSimilar attack · NVD/CVE Database
- MediumCVE-2026-108670: JeecgBoot missing authorization in AiragPromptsControllerSimilar attack · NVD/CVE Database
- MediumCVE-2026-108600: open-multi-agent link following flaw in file_write tool sandboxSimilar attack · NVD/CVE Database