CVE-2017-5226

CVE-2017-5226 describes a critical sandbox escape vulnerability in projectatomic bubblewrap, where a non-privileged session can escape to the parent session. This is achieved by using the TIOCSTI ioctl to inject characters into the terminal's input buffer. With a CVSS score of 10.0, this vulnerability allows for complete compromise of confidentiality, integrity, and availability, requiring no user interaction or privileges. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.