"According to their response all other tools were already sandboxed." Everything... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		KingOfCoders 72 days ago \| parent \| context \| favorite \| on: How we exploited CodeRabbit: From simple PR to RCE... "According to their response all other tools were already sandboxed." Everything else was fine, just this one tool chosen by the security researcher out of a dozen of tools was not sandboxed.

darkwater 72 days ago [–]

Yeah, I thought the same. They were really unlucky, the only analyzer that let you include and run code was the one outside of the sandbox. What were the chances?

Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact