kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)
A guest mruby script running inside the Kobako sandbox can execute arbitrary Ruby in the host process, fully escaping the sandbox.
Advisories for Gem/Kobako package
2026