{"id":"EUVD-2025-201249","enisaUuid":"13fe0dd7-9888-3511-9927-5c6ee940d574","description":"Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the sandbox policy did not configure any allowed domains. This could allow sandboxed code to make network requests outside of the sandbox. A patch for this was released in v0.0.16.","datePublished":"Dec 4, 2025, 8:57:20 PM","dateUpdated":"Dec 5, 2025, 5:04:34 PM","baseScore":1.8,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/anthropic-experimental/sandbox-runtime/security/advisories/GHSA-9gqj-5w7c-vx47\nhttps://github.com/anthropic-experimental/sandbox-runtime/commit/bea2930cc1db9c73a1b15acf6dc19c5261aec1f3\n","aliases":"CVE-2025-66479\nGHSA-9gqj-5w7c-vx47\n","assigner":"GitHub_M","epss":0.16,"enisaIdProduct":[{"id":"c77498e2-2bb8-378b-9993-bc8d2413d30d","product":{"name":"sandbox-runtime","vendor":{"name":"anthropic-experimental"}},"product_version":"\u003c 0.0.16"}],"enisaIdVendor":[{"id":"06f327ab-60a2-32b2-9892-f1329a28d762","vendor":{"name":"anthropic-experimental"}}],"enisaIdVulnerability":[{"id":"899f27b3-838f-33d9-bd70-625636515d1f","vulnerability":{"id":"CVE-2025-66479","description":"Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Prior to 0.0.16, due to a bug in sandboxing logic, sandbox-runtime did not properly enforce a network sandbox if the sandbox policy did not configure any allowed domains. This could allow sandboxed code to make network requests outside of the sandbox. A patch for this was released in v0.0.16.","datePublished":"Dec 4, 2025, 8:57:20 PM","dateUpdated":"Dec 5, 2025, 5:04:34 PM","status":"PUBLISHED","baseScore":1.8,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/anthropic-experimental/sandbox-runtime/security/advisories/GHSA-9gqj-5w7c-vx47\nhttps://github.com/anthropic-experimental/sandbox-runtime/commit/bea2930cc1db9c73a1b15acf6dc19c5261aec1f3\n","enisa_id":"EUVD-2025-201249\n","assigner":"GitHub_M","epss":0.16,"dataProcessed":"Oct 29, 2026, 7:20:27 AM","vulnerabilityProduct":[{"id":"87246876-23f9-3adc-baf7-ecda2355b014","product":{"name":"sandbox-runtime","vendor":{"name":"anthropic-experimental"}},"product_version":"\u003c 0.0.16"}],"vulnerabilityVendor":[{"id":"452da47a-f13b-3f61-a55d-007cd123e113","vendor":{"name":"anthropic-experimental"}}]}},{"id":"bb6fbcda-eb62-3556-aa8d-7d76d111ce5f","vulnerability":{"id":"GHSA-9gqj-5w7c-vx47","description":"Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing ","datePublished":"Dec 4, 2025, 4:55:06 PM","dateUpdated":"Dec 4, 2025, 10:50:11 PM","baseScore":0.0,"references":"https://github.com/anthropic-experimental/sandbox-runtime/security/advisories/GHSA-9gqj-5w7c-vx47\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-66479\nhttps://github.com/anthropic-experimental/sandbox-runtime/commit/bea2930cc1db9c73a1b15acf6dc19c5261aec1f3\nhttps://github.com/anthropic-experimental/sandbox-runtime\n","enisa_id":"EUVD-2025-201249\n","aliases":"CVE-2025-66479\nGHSA-9gqj-5w7c-vx47\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:51:54 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}