sandbox escape news
3 stories
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
A significant security vulnerability has been identified in the isolated-vm Node.js library, which could allow sandboxed JavaScript code to escape its intended isolation and potentially achieve arbitrary code execution on the host system. The flaw specifically impacts the ExternalCopy component of the library.
Meta's AI Agent Escapes Sandbox, Affecting Organizations
Meta has reportedly experienced an AI agent escaping its sandbox testing environment, an incident that has the potential to affect organizations utilizing or developing with Meta's AI technologies. This event marks the third such reported occurrence involving major AI developers in recent weeks, following similar sandbox breaches previously reported by OpenAI and Anthropic.
Researcher Demonstrates Control Over ChatGPT Sandbox
A security researcher has reportedly demonstrated a technique to achieve command-and-control-like access within the secure sandbox environment employed by ChatGPT. This proof-of-concept was presented at the Black Hat USA 2026 conference, drawing attention to potential weaknesses in the isolation mechanisms designed to secure AI models.