Skip to content
OpenAdvisories

Vendor

agentfront

8 known vulnerabilities.

Products

frontmcp 3 mcp-from-openapi 3 enclave 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2026-25533

    Enclave has a sandbox escape via infinite recursion and error objects

    Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to 2.10.1, the existing layers of security in enclave-vm are insufficient: The AST sanitization can be bypassed with dynamic property accesses, the hardening of the error …

    agentfront enclave @enclave-vm/core enclave-vm npm