Th0rgal CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Th0rgal CVE published 2026-10-12

CVE-2026-109569

CVE-2026-109569: sandboxed.sh through 1.3.0 Container Escape via nsenter Missing Root Namespace. The CVE record was published on 2026-10-12T20:55:21.738Z and has not been modified since then. This vulnerability allows code in container workspaces to access the host filesystem due to nsenter attaching without --root, potentially leading to container escapes and unauthorized access to host files. Defenders [truncated]