CVE-2026-47128

Received Received - Intake

Sandbox Escape via Unix Domain Socket Access in nono

Publication date: 2026-07-20

Last updated on: 2026-07-20

Assigner: GitHub, Inc.

Description

nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to version 0.55.0, the nono Landlock/seccomp policies allow access to local Unix domain sockets (concrete and abstract). This allows an easy sandbox escape by talking to the per-user systemd dbus socket. Version 0.55.0 patches the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-20

Last Modified

2026-07-20

Generated

2026-07-21

AI Q&A

2026-07-21

EPSS Evaluated

N/A

NVD

CVE-2026-47128

Affected Vendors & Products

Vendor	Product	Version / Range
nono	nono	to 0.55.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability affects nono software versions before 0.55.0. It involves weak Landlock/seccomp policies that permit access to local Unix domain sockets, including systemd's per-user D-Bus socket. This flaw enables sandbox escape by allowing communication through these sockets.

Detection Guidance

To detect this vulnerability, check if you are running a version of nono prior to 0.55.0. Run the command: nono --version. If the version is less than 0.55.0, the system is vulnerable.

Impact Analysis

An attacker could exploit this to escape the sandbox and gain unauthorized access to system resources or other processes. This could lead to data breaches, privilege escalation, or compromise of the host system depending on the sandboxed environment's configuration.

Compliance Impact

This vulnerability allows sandbox escape via local Unix domain sockets, potentially enabling unauthorized access to system resources. While not directly tied to GDPR or HIPAA, such access could lead to data breaches or unauthorized data processing, which may violate these regulations depending on the context of use.

Mitigation Strategies

Update nono to version 0.55.0 or later to patch the vulnerability. The issue is fixed in this version by correcting the Landlock/seccomp policies to block access to local Unix domain sockets.

Hi! I’m here to help you understand CVE-2026-47128. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70