Skyvern sandbox bypass allows code execution on server

Summary

A sandbox bypass in the Skyvern server process lets authenticated users run code on the server. Versions through 1.0.56 are affected.

Affected when

• an authenticated user account

What to do

Check that you run a version newer than 1.0.56 and read the vendor's advisory. No fixed version is named in the sources.

Products and platforms

• skyvern

CVE IDs

• CVE-2026-123783 (opens in a new tab)

Sources

• Write-up: github.com (opens in a new tab) · github.com (opens in a new tab) · vulncheck.com (opens in a new tab)
• CVE record: cve.org (opens in a new tab)

Times

First published 2026-11-06 15:00 UTC

First seen 2026-11-09 18:10 UTC