CVE-2026-123783: falha de alta gravidade em Skyvern-AI skyvern
Skyvern through 1.0.56 Script Sandbox Bypass via types.CodeType Bytecode
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
18Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7
Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType. Attackers can deploy scripts that evade the is_safe_script_code AST denylist and import blocked modules such as subprocess or socket to run code in the Skyvern server process.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Skyvern-AI · skyvernCVEs relacionadas — Skyvern-AI skyvern
No mesmo produto, das mais perigosas para as menos.
Referências
https://github.com/Skyvern-AI/skyvernhttps://github.com/Skyvern-AI/skyvern/blob/v1.0.56/skyvern/forge/sdk/workflow/code_block_safety.py#L106-L142https://github.com/Skyvern-AI/skyvern/blob/v1.0.56/skyvern/forge/sdk/workflow/service.py#L1509-L1511https://github.com/Skyvern-AI/skyvern/commit/31a64c1a4b5dfaf1e76a7164845e10f2d68248dchttps://github.com/Skyvern-AI/skyvern/issues/8927https://github.com/Skyvern-AI/skyvern/pull/8937https://www.vulncheck.com/advisories/skyvern-through-1.0.56-script-sandbox-bypass-via-types-codetype-bytecode