Executive brief
nono-py is a Python library used to manage network access and credentials for sandboxed child processes. A security flaw in its default configuration allows these sandboxed processes to bypass intended network restrictions and connect to unauthorized external or internal services. This could lead to sensitive data being sent to unintended locations or unauthorized access to internal company resources.
Technical details
nono-py is vulnerable to an authorization bypass and policy confusion due to insecure default initialization (CWE-1188). The library's Python API incorrectly treats an empty 'allowed_hosts' list as a permit-all policy within the nono-proxy component, rather than a restrictive one. A local attacker or untrusted child process running in a 'CapabilitySet.proxy_only' environment can exploit this to use the local proxy as a transparent CONNECT tunnel to reach arbitrary hosts. This bypasses intended egress controls, potentially allowing data exfiltration or lateral movement to internal services. The issue is addressed in version 0.11.0 by changing the default behavior to an explicit opt-in model.
Affected products
- nolabs-ai nono-py <= 0.10.1
Timeline
- 2026-05-23: disclosed: Advisory published by maintainer
- 2026-06-26: advisory: GitHub Advisory Database entry published/reviewed
- 2026-06-26: patched: Version 0.11.0 released