Frappe ERPNext Sandbox Escape via Frame Introspection

Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that allows authenticated users with System Manager role to execute arbitrary code by exploiting frame introspection. Attackers can create a server script via the /app/server-script endpoint and access the gi_frame attribute to traverse the call stack and invoke os.popen to execute system commands.

Casky was already ahead

This CVE exploits attack patterns that Casky's 301matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

CVE-2023-54345 is a critical sandbox escape vulnerability in Frappe Framework's ERPNext 13.4.0 that leverages RestrictedPython's insufficient restrictions on frame introspection. Authenticated users with the System Manager role can exploit this by creating malicious server scripts that access the gi_frame attribute to traverse the Python call stack and invoke os.popen for arbitrary command execution. This vulnerability matters because ERPNext is widely deployed in enterprise environments for ERP operations, and System Manager accounts—while privileged—are common across organizations. The attack converts a legitimate administrative function (server script creation) into a direct path to system command execution, fundamentally breaking the intended sandbox isolation that RestrictedPython provides.

Casky's 301 mapped skills leverage Claude AI with extended reasoning to detect this attack pattern across MITRE ATT&CK's Initial Access (TA0001) and Execution (TA0043) phases. Practitioners using Casky would identify detection signals including: suspicious frame object access patterns in RestrictedPython execution contexts, anomalous gi_frame attribute references in server-script endpoints, and os.popen invocations originating from administrative script interfaces. The platform's skill set specifically maps CWE-94 (Improper Control of Generation of Code) patterns, surfacing indicators like dynamic code generation without proper sandbox enforcement, unexpected system call execution from application-layer script environments, and privilege escalation from application-level roles to OS-level command execution. Security teams would see findings flagging the chain: authenticated access → server-script endpoint → frame introspection → os module invocation, enabling rapid detection and remediation before system compromise.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

301 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2023-54345.

analyzing-apt-group-with-mitre-navigator

threat intelligence · low

Run

analyzing-campaign-attribution-evidence

threat intelligence · low

Run

analyzing-certificate-transparency-for-phishing

threat intelligence · low

Run

MITRE ATT&CK Techniques

TA0001 TA0043

Investigate the attack patterns behind CVE-2023-54345

Casky has 301 skills that investigate the attack patterns behind CVE-2023-54345. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn