A critical security vulnerability has been disclosed in a Python-based sandbox called Terrarium that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-5752, is rated 9.3 on the CVSS scoring system. "Sandbox escape vulnerability in Terrarium allows arbitrary code execution with root privileges on a host process via JavaScript prototype chain traversal," according to
source https://thehackernews.com/2026/04/cohere-ai-terrarium-sandbox-flaw.html
Wednesday, April 22, 2026
Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box