crates.io nono-cli vulnerabilities

Latest crates.io nono-cli CVEs

Newest publication first

1. GHSA-hc4m-q9jh-xw4j nono-cli'scregistry pack verification can fail open when provenance metadata is absent

   Published 2026-07-28

   Medium·CVSS 6.6

   Summary Registry-installed nono packs are expected to be verified from local provenance metadata before they are used. Two files are relevant: ~/.config/nono/packages/lockfile.json ~/.config/nono/packages/<namespace>/<pack>/.nono-trust.bundle Testing shows that nono fails closed...

2. CVE-2026-47128 nono: Sandbox escape on Linux via D-Bus: `systemd-run --user`

   Published 2026-07-20

   Medium·CVSS 6.1 EPSS 0.13%

   nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to version 0.55.0, the nono Landlock/seccomp policies allow access to local Unix domain sockets (concrete and abstract). This allows an easy sandbox escape by talking to the per-user systemd dbus...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.