← CVE Intelligence

CVE-2026-47128

nono: Sandbox escape on Linux via D-Bus: `systemd-run --user` PUBLISHED

Description (CNA)

nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to version 0.55.0, the nono Landlock/seccomp policies allow access to local Unix domain sockets (concrete and abstract). This allows an easy sandbox escape by talking to the per-user systemd dbus socket. Version 0.55.0 patches the issue.

Affected (CNA)

Vendor / productVersions
always-further / nonoaffected < 0.55.0

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.