Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 10:34:08 +0000 fkie_cve-2026-109441 https://db.gcve.eu/vuln/fkie_cve-2026-109441 <p>LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants&#39; sandbox containers on Docker&#39;s shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other tenants&#39; containers, bypassing require_workspace_owner checks to read files such as vault secrets from exposed servers.</p> <p>LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants&#39; sandbox containers on Docker&#39;s shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other tenants&#39; containers, bypassing require_workspace_owner checks to read files such as vault secrets from exposed servers.</p> https://db.gcve.eu/vuln/fkie_cve-2026-109441 GHSA-g5q6-qcmx-6vw9 https://db.gcve.eu/vuln/ghsa-g5q6-qcmx-6vw9 <p>LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants&#39; sandbox containers on Docker&#39;s shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other tenants&#39; containers, bypassing require_workspace_owner checks to read files such as vault secrets from exposed servers.</p> <p>LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants&#39; sandbox containers on Docker&#39;s shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other tenants&#39; containers, bypassing require_workspace_owner checks to read files such as vault secrets from exposed servers.</p> https://db.gcve.eu/vuln/ghsa-g5q6-qcmx-6vw9