RunSybil CPython generic-alias Jinja sandbox escape research

Evidence record

Read the original source ↗

Claim-level citations (3)

• supportsA CPython memory error broke the Jinja boundary around model chat templates: The demonstrated execution used a malicious chat template and interpreter memory-safety behavior inside a model-loading context; it did not establish escape from the surrounding container or host isolation.

  Researchers demonstration and affected environment constraints

• supportsA CPython memory error broke the Jinja boundary around model chat templates: RunSybil demonstrated a Python generic-alias substitution memory error in a constrained Jinja environment used to render model chat templates.

  Escaping a Model Chat Template Sandbox for Code Execution; Reaching CPython Type Machinery

• supportsA CPython memory error broke the Jinja boundary around model chat templates: RunSybil said it had coordinated disclosure with CPython, Pallets and Hugging Face but had not established a holistic upstream remediation owner when it published its report.

  Key Takeaways and Coordinated Disclosure section