GHSA-9gqj-5w7c-vx47

Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing

Source: GitHub Advisory Database (reviewed) Low CVE-2025-66479

Packages

Ecosystem	Package	Affected	Fixed in
npm	@anthropic-ai/sandbox-runtime	< 0.0.16	0.0.16

Details

As written in the advisory (Markdown source, shown as plain text).

Due to a bug in sandboxing logic, `sandbox-runtime` did not properly enforce a network sandbox if the sandbox policy did not configure any allowed domains. This could allow sandboxed code to make network requests outside of the sandbox. A patch for this was released in v0.0.16. Thank you to https://github.com/bendrucker for reporting this issue!

References

External links from the advisory. They lead to third-party sites.

https://github.com/anthropic-experimental/sandbox-runtime/security/advisories/GHSA-9gqj-5w7c-vx47 web
https://nvd.nist.gov/vuln/detail/CVE-2025-66479 advisory
https://github.com/anthropic-experimental/sandbox-runtime/commit/bea2930cc1db9c73a1b15acf6dc19c5261aec1f3 web
https://github.com/anthropic-experimental/sandbox-runtime package