https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 20:11:09 +0000 https://db.gcve.eu/vuln/cve-2026-109441 <p><strong>Affected:</strong> ginlix-ai LangAlpha</p> <p>LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants&#39; sandbox containers on Docker&#39;s shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other tenants&#39; containers, bypassing require_workspace_owner checks to read files such as vault secrets from exposed servers.</p> <p><strong>Affected:</strong> ginlix-ai LangAlpha</p> <p>LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants&#39; sandbox containers on Docker&#39;s shared default bridge network with inter-container communication enabled. Authenticated users with code execution in their own sandbox can connect directly to other tenants&#39; containers, bypassing require_workspace_owner checks to read files such as vault secrets from exposed servers.</p> https://db.gcve.eu/vuln/cve-2026-109441