CVE-2026-5752

Sandbox Escape Vulnerability in Terrarium allows arbitrary code execution with root privileges on a host process via JavaScript prototype chain traversal.

Score

CVSS 3.1 9.3 Critical

Status

Awaiting Analysis - cret@cert.org

Published

2026-04-14

Last modified

2026-04-23

Affected products

• Cohere-terrarium (Cohere)

References

• https://github.com/cohere-ai/cohere-terrarium
• https://kb.cert.org/vuls/id/414811
• https://www.kb.cert.org/vuls/id/414811