Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape

A critical security vulnerability has been disclosed in a Python-based sandbox called Terrarium that could result in arbitrary code execution.
The vulnerability, tracked as CVE-2026-5752, is rated 9.3 on the CVSS scoring system.
“Sandbox escape vulnerability in Terrarium allows arbitrary code execution with root privileges on a host process via JavaScript prototype chain traversal,” according to

The post “Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape” appeared first on The Hacker News

Source:The Hacker News – [email protected] (The Hacker News)