
Exploit for CVE-2026-27597, a critical RCE in Agentfront Enclave before 2.11.1, allowing sandbox escape and remote code execution.
python3 exploit.py -t "C:\\Path\\To\\Target" -o demo.zip --data-file payload.exe
Enclave is a secure JavaScript sandbox designed for safe AI agent code execution. Prior to version 2.11.1, it is possible to escape the security boundraries set by @enclave-vm/core, which can be used to achieve remote code execution (RCE). The issue has been fixed in version 2.11.1.
Agentfront Enclave: