Home / Vulnerability Intelligence / CVE-2026-5752

CVE-2026-5752 - Vulnerability Analysis

CriticalCVSS: 9.3

Last Updated: April 14, 2026

Terrarium - Sandbox Escape

Published: April 14, 2026Updated: April 14, 2026

Overview

Terrarium contains a sandbox escape vulnerability caused by JavaScript prototype chain traversal, letting attackers execute arbitrary code with root privileges on the host process, exploit requires no special conditions.

Severity & Score

Severity: Critical

CVSS Score: 9.3

Impact

Attackers can execute arbitrary code with root privileges, leading to full system compromise.

Mitigation

Update to the latest version.

References

https://github.com/cohere-ai/cohere-terrarium
https://kb.cert.org/vuls/id/414811

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2026-5752
Severity: Critical
CVSS Score: 9.3
Type: prototype_pollution
Status: new

CVSS Metrics

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H