Sandbox Bypass in Skyvern by Skyvern AI

CVE-2026-123783

What is CVE-2026-123783?

Skyvern, through version 1.0.56, is susceptible to a sandbox bypass vulnerability which allows authenticated users to construct functions from raw bytecode using types.CodeType. This weakness enables attackers to execute unauthorized scripts that circumvent the security measures of the is_safe_script_code Abstract Syntax Tree (AST) denylist, granting access to restricted modules such as subprocess and socket. Consequently, this could lead to the execution of arbitrary code within the Skyvern server environment, posing significant security risks.

References