CVE-2026-5752

CriticalCVSS 9.3

Published: 14/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

A sandbox escape vulnerability in Terrarium allows arbitrary code execution with root privileges on a host process via JavaScript prototype chain traversal.

Risk Assessment

An attacker can gain full control over the host system, leading to complete compromise.

Recommendation

Update Terrarium to a patched version. Restrict execution of untrusted JavaScript code.

Original NVD description (English source)

Sandbox Escape Vulnerability in Terrarium allows arbitrary code execution with root privileges on a host process via JavaScript prototype chain traversal.