CVE-2018-18748

CVE-2018-18748 describes a sandbox escape vulnerability in Sandboxie 5.26, where a Python script containing "import os" followed by os.system("cmd") or os.system("powershell") can execute commands outside the sandbox. This vulnerability is rated Critical with a CVSS score of 10.0, indicating a network-exploitable flaw with low attack complexity and high impact on confidentiality, integrity, and availability. Despite the high severity, the vendor disputes the issue, and there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.