{"uuid": "592bee1b-de6e-4851-bf8d-21ad4df40b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25725", "type": "seen", "source": "https://t.me/hacking_Attack/183190", "content": "The Race to Ship AI Tools Left Security Behind. Part 1: Sandbox Escape\nhttps://www.reddit.com/r/redteamsec/comments/1sf54ak/the_race_to_ship_ai_tools_left_security_behind/\n\nAI coding tools are being shipped fast. In too many cases, basic security is not keeping up. In our latest research, we found the same sandbox trust-boundary failure pattern across tools from Anthropic, Google, and OpenAI. Anthropic fixed and engaged quickly (CVE-2026-25725). Google did not ship a fix by disclosure. OpenAI closed the report as informational and did not address the core architectural issue. That gap in response says a lot about vendor security posture.    submitted by    /u/Fun_Preference1113  (https://www.reddit.com/user/Fun_Preference1113) \n [link] (https://cymulate.com/blog/the-race-to-ship-ai-tools-left-security-behind-part-1-sandbox-escape/)   [comments] (https://www.reddit.com/r/redteamsec/comments/1sf54ak/the_race_to_ship_ai_tools_left_security_behind/)", "creation_timestamp": "2026-09-01T20:00:11.466914Z"}