CVE-2026-5752

Summary

Sandbox Escape Vulnerability in Terrarium allows arbitrary code execution with root privileges on a host process via JavaScript prototype chain traversal.

Affected Software

Weaknesses

• CWE-94 Improper Control of Generation of Code ('Code Injection')
• CWE-400 Uncontrolled Resource Consumption
• CWE-284 Improper Access Control

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://www.kb.cert.org/vuls/id/414811

References

• https://kb.cert.org/vuls/id/414811
• https://github.com/cohere-ai/cohere-terrarium

• ←Previous
• Next→