https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T03:16:27.628123+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-47128 CVE-2026-47128 — nono: Sandbox escape on Linux via D-Bus: `systemd-run --user` 2026-10-13T03:16:27.645133+00:00

Affected: always-further nono

nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to version 0.55.0, the nono Landlock/seccomp policies allow access to local Unix domain sockets (concrete and abstract). This allows an easy sandbox escape by talking to the per-user systemd dbus socket. Version 0.55.0 patches the issue.