CVE-2024-28185

Judge0 is an open-source online code execution system. The application does not account for symlinks placed inside the sandbox directory, which can be leveraged by an attacker to write to arbitrary files and gain code execution outside of the sandbox. When executing a submission, Judge0 writes a `run_script` to the sandbox directory. The security issue is that an attacker can create a symbolic link (symlink) at the path `run_script` before this code is executed, resulting in the `f.write` writing to an arbitrary file on the unsandboxed system. An attacker can leverage this vulnerability to overwrite scripts on the system and gain code execution outside of the sandbox.

• CWE-59
• CWE-61

• https://github.com/judge0/judge0/blob/v1.13.0/app/jobs/isolate_job.rb#L197-L201
• https://github.com/judge0/judge0/commit/846d5839026161bb299b7a35fd3b2afb107992fc
• https://github.com/judge0/judge0/security/advisories/GHSA-h9g2-45c8-89cf
• https://github.com/judge0/judge0/blob/v1.13.0/app/jobs/isolate_job.rb#L197-L201
• https://github.com/judge0/judge0/commit/846d5839026161bb299b7a35fd3b2afb107992fc
• https://github.com/judge0/judge0/security/advisories/GHSA-h9g2-45c8-89cf

Published

Apr 18, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2818An issue has been discovered in GitLab CE/EE affecting all v…6.5
• CVE-2024-28180Package jose aims to provide an implementation of the Javasc…4.3
• CVE-2024-28181 turbo_boost-commands is a set of commands to help you build…8.1
• CVE-2024-28182nghttp2 is an implementation of the Hypertext Transfer Proto…5.3
• CVE-2024-28183ESP-IDF is the development framework for Espressif SoCs supp…5.7
• CVE-2024-28184WeasyPrint helps web developers to create PDF documents. Sin…7.4
• CVE-2024-28186FreeScout is an open source help desk and shared inbox built…7.1
• CVE-2024-28187SOY CMS is an open source CMS (content management system) th…7.2
• CVE-2024-28188Jupyter Scheduler is collection of extensions for programmin…5.3
• CVE-2024-28189Judge0 is an open-source online code execution system. The a…10
• CVE-2024-2819Incorrect Default Permissions, Improper Preservation of Perm…6.5
• CVE-2024-28190Contao is an open source content management system. Starting…5.4