Evidence · DiggingBeagle record
OpenBMB IoA issue 18, local code executor without sandbox
- Source role
- primary disclosure
Evidence record
Claim-level citations (1)
- supportsIoA's code executor ran on the host despite its Docker-sandbox description: Issue 18 identifies im_client/agents/tools/code_executor.py executing scripts through the host subprocess, with filename paths not contained within its intended work directory.
Issue #18, Summary, Root cause and vulnerable source-code lines