Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape

Summary: A critical vulnerability in Cohere AI's open-source Python sandbox Terrarium, tracked as CVE-2026-5752 and rated 9.3 on CVSS, allows arbitrary code execution with root privileges on a host process via JavaScript prototype chain traversal. CERT/CC attributes the root cause to prototype chain traversal in the Pyodide WebAssembly environment, letting an attacker break out of the sandbox, read files such as /etc/passwd, reach other services on the container's network, and possibly escape the container, with local access required but no user interaction or special privileges.
Key Takeaway: Terrarium is used to run untrusted user- and LLM-generated code, and because the project is no longer actively maintained, the flaw is unlikely to be patched - leaving anyone still running the container to rely on mitigations alone.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-5752
Related: ⚡ Weekly Recap: Fast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & More Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026