{"vulnerability": "CVE-2026-25725", "sightings": [{"uuid": "9c8d52f4-039b-4343-9fe8-30b2c10a431e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25725", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3megtfi44q22m", "content": "", "creation_timestamp": "2026-02-09T16:07:46.050222Z"}, {"uuid": "e4992c56-553e-4d0e-973d-d022db372ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25725", "type": "seen", "source": "https://gist.github.com/alon710/51a0c55d4dbb7e259a8444e158c05d3a", "content": "", "creation_timestamp": "2026-02-06T19:40:05.000000Z"}, {"uuid": "524a4c8d-85ba-482c-b79b-1448c6aa2104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25725", "type": "seen", "source": "https://gist.github.com/hdknr/fd36299e0751373fd17f0ab90d49bf98", "content": "", "creation_timestamp": "2026-03-03T13:58:01.000000Z"}, {"uuid": "592bee1b-de6e-4851-bf8d-21ad4df40b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25725", "type": "seen", "source": "https://t.me/hacking_Attack/183190", "content": "The Race to Ship AI Tools Left Security Behind. Part 1: Sandbox Escape\nhttps://www.reddit.com/r/redteamsec/comments/1sf54ak/the_race_to_ship_ai_tools_left_security_behind/\n\nAI coding tools are being shipped fast. In too many cases, basic security is not keeping up. In our latest research, we found the same sandbox trust-boundary failure pattern across tools from Anthropic, Google, and OpenAI. Anthropic fixed and engaged quickly (CVE-2026-25725). Google did not ship a fix by disclosure. OpenAI closed the report as informational and did not address the core architectural issue. That gap in response says a lot about vendor security posture.    submitted by    /u/Fun_Preference1113  (https://www.reddit.com/user/Fun_Preference1113) \n [link] (https://cymulate.com/blog/the-race-to-ship-ai-tools-left-security-behind-part-1-sandbox-escape/)   [comments] (https://www.reddit.com/r/redteamsec/comments/1sf54ak/the_race_to_ship_ai_tools_left_security_behind/)", "creation_timestamp": "2026-09-01T20:00:11.466914Z"}, {"uuid": "49b6567f-9fb2-4039-9103-4722ce8c30f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25725", "type": "seen", "source": "https://t.me/hacking_Attack/183190", "content": "The Race to Ship AI Tools Left Security Behind. Part 1: Sandbox Escape\nhttps://www.reddit.com/r/redteamsec/comments/1sf54ak/the_race_to_ship_ai_tools_left_security_behind/\n\nAI coding tools are being shipped fast. In too many cases, basic security is not keeping up. In our latest research, we found the same sandbox trust-boundary failure pattern across tools from Anthropic, Google, and OpenAI. Anthropic fixed and engaged quickly (CVE-2026-25725). Google did not ship a fix by disclosure. OpenAI closed the report as informational and did not address the core architectural issue. That gap in response says a lot about vendor security posture.    submitted by    /u/Fun_Preference1113  (https://www.reddit.com/user/Fun_Preference1113) \n [link] (https://cymulate.com/blog/the-race-to-ship-ai-tools-left-security-behind-part-1-sandbox-escape/)   [comments] (https://www.reddit.com/r/redteamsec/comments/1sf54ak/the_race_to_ship_ai_tools_left_security_behind/)", "creation_timestamp": "2026-09-02T01:00:27.860980Z"}, {"uuid": "824c12d9-63bb-4699-b839-0898f19a2d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25725", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/183190", "content": "The Race to Ship AI Tools Left Security Behind. Part 1: Sandbox Escape\nhttps://www.reddit.com/r/redteamsec/comments/1sf54ak/the_race_to_ship_ai_tools_left_security_behind/\n\nAI coding tools are being shipped fast. In too many cases, basic security is not keeping up. In our latest research, we found the same sandbox trust-boundary failure pattern across tools from Anthropic, Google, and OpenAI. Anthropic fixed and engaged quickly (CVE-2026-25725). Google did not ship a fix by disclosure. OpenAI closed the report as informational and did not address the core architectural issue. That gap in response says a lot about vendor security posture.    submitted by    /u/Fun_Preference1113  (https://www.reddit.com/user/Fun_Preference1113) \n [link] (https://cymulate.com/blog/the-race-to-ship-ai-tools-left-security-behind-part-1-sandbox-escape/)   [comments] (https://www.reddit.com/r/redteamsec/comments/1sf54ak/the_race_to_ship_ai_tools_left_security_behind/)", "creation_timestamp": "2026-09-03T00:00:36.676367Z"}]}