Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape

A critical vulnerability (CVE-2026-5752, CVSS 9.3) in Cohere AI's Terrarium sandbox allows root code execution via JavaScript prototype chain traversal.

• •JavaScript prototype pollution in Pyodide bypasses sandbox security boundaries
• •Enables arbitrary system commands as root, unauthorized file access, and container escape
• •No user interaction required for exploitation; requires only local access
• •Project unmaintained; mitigations include network segmentation, code submission controls, and container access limits

This summary was automatically generated by AI based on the original article and may not be fully accurate.