Patched code sample

# This code demonstrates the fix for the sandbox escape vulnerability
# in Agenta-API (CVE-2024-27952, referenced as CVE-2026-27952 in the prompt).
# The fix consists of removing 'numpy' from the list of modules
# allowed within the RestrictedPython sandbox.

from RestrictedPython import compile_restricted
from RestrictedPython.Guards import safe_builtins

def create_guarded_import(allowed_modules):
    """
    Factory function to create a guarded import that only allows modules
    from a specific allowlist.
    """
    def _guarded_import(name, globals=None, locals=None, fromlist=(), level=0):
        # The core of the security check: is the module in the allowlist?
        if name in allowed_modules:
            return __import__(name, globals, locals, fromlist, level)
        # If not allowed, block the import.
        raise ImportError(f"Importing module '{name}' is not allowed in the sandbox.")
    return _guarded_import

# In Agenta-API v0.48.1, the fix was to remove 'numpy' from this list.
# This list represents the state of the configuration AFTER the fix.
FIXED_ALLOWED_MODULES = [
    'math',
    'random',
    'datetime',
    'json',
    're',
    # In the vulnerable version (<0.48.1), 'numpy' was present in this list.
]

# Set up the safe global environment for the restricted code execution.
# We inject our custom, hardened import function.
safe_globals = safe_builtins.copy()
safe_globals['__import__'] = create_guarded_import(FIXED_ALLOWED_MODULES)

# This is the malicious code that would have been used to exploit the vulnerability.
# It relies on importing 'numpy' to access 'inspect' and then 'os.system'.
exploit_payload = """
# This payload will fail because the first line is blocked by the fixed import guard.
import numpy
os_module = numpy.ma.core.inspect.sys.modules['os']
os_module.system('echo "Code execution attempt!"')
"""

# Demonstrate that the fix is effective by attempting to run the exploit payload
# in the properly configured (fixed) sandbox.
try:
    print("Attempting to run exploit payload in the fixed sandbox environment...")
    # Compile the user-supplied code in a restricted mode.
    byte_code = compile_restricted(exploit_payload, filename='<string>', mode='exec')
    # Execute the compiled code. This is expected to fail.
    exec(byte_code, safe_globals, None)
except ImportError as e:
    print(f"\nSUCCESS: The sandbox prevented the exploit.")
    print(f"The attempt was blocked with the following error: {e}")
    print("This confirms the fix is effective, as the restricted environment no longer allows 'numpy' to be imported.")
except Exception as e:
    print(f"\nFAILURE: An unexpected error occurred: {type(e).__name__}: {e}")