Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/dhananjayasj/cve-2026-34156-nocobase-sandbox-escape-via-workflow-execution-vulnerability-
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and ControlRed Teaming
GitHubdhananjayasj/cve-2026-34156-nocobase-sandbox-escape-via-workflow-execution-vulnerability-

CVE-2026-34156-NocoBase-Sandbox-Escape-via-Workflow-Execution-Vulnerability-

Authenticated RCE exploit for NocoBase workflow engine sandbox escape (CVE-2026-34156). Executes arbitrary system commands via crafted workflow expressions on vulnerable servers.

View Repository
443 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-34156 – NocoBase Sandbox Escape (RCE)

CVE-2026-34156 CVSS NocoBase

Authenticated Remote Code Execution in NocoBase versions ≤ 2.0.26 via workflow sandbox escape.

📋 Description

CVE-2026-34156 is a sandbox escape vulnerability in the NocoBase workflow engine. An authenticated attacker can create a malicious workflow that bypasses the expression sandbox and executes arbitrary system commands on the underlying server.

  • Attack Vector – Authenticated HTTP requests to the NocoBase API
  • Privileges Required – Low (any valid user with workflow creation rights)
  • Impact – Full RCE (container escape possible if running as root)

🔧 Installation

Clone the repository and install dependencies:

root@kitploit:~
git clone https://github.com/0xBlackash/CVE-2026-34156.git cd CVE-2026-34156 pip3 install requests
Download Tool