{"uuid": "6969f191-4776-4ca6-ae5a-74307f8e4b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-79918", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117395934708563318", "content": "CVE-2026-79918 MaxKB sandbox escape: ToolExecutor misses fexecve, letting authenticated tool code spawn processes outside policy. CVSS 6.3. Fixed in 2.10.6-lts; patch still under review, so update as soon as it ships. https://www.valtersit.com/cve/CVE-2026-79918/ #CVE #infosec #MaxKB", "creation_timestamp": "2026-10-06T20:50:12.023389Z"}