H3-2026-1102¶
Yuxi Sandbox Provisioner Missing Authentication Vulnerability
| Category | SECURITY_MISCONFIGURATION |
| Base Score | 10.0 |
Description¶
Xerrors Yuxi exposes its sandbox provisioner HTTP API without any authentication check. The provisioner accepts requests to create, list, and control sandbox containers, and its client API can reach other tenants sandbox endpoints directly over the network. Remote attackers who can reach the provisioner port need no credentials or prior foothold to enumerate and control sandboxes belonging to any tenant. The flaw exists because the provisioner was shipped listening on the network with no bearer token or other access control configured by default.
Impact¶
Attackers gain the ability to spawn sandbox containers and reach other tenants sandbox execute and file endpoints directly. This can lead to cross tenant code execution and file exfiltration across every sandbox the provisioner manages. Multi tenant AI sandboxing deployments face the highest exposure.