GHSA-vjgj-42f6-7997: Protection Mechanism Failure via Incomplete Seccomp Sandbox in Netfoil

Vulnerability ID: GHSA-VJGJ-42F6-7997

CVSS Score: 6.0

Published: 2026-04-29

Netfoil versions prior to v0.2.1 suffer from a protection mechanism failure where the optional seccomp sandbox causes the application to crash or fails to apply due to an incomplete system call whitelist. This flaw neutralizes the intended defense-in-depth mechanisms, leaving the application with standard runtime privileges.

TL;DR

Netfoil's --filter-system-calls feature fails to apply correctly due to a missing SYS_RT_SIGACTION syscall in its seccomp whitelist, leading to application crashes or sandbox bypass.…