CVE-2021-42952

CVE-2021-42952 is a critical sandbox escape vulnerability affecting Zepl Notebooks prior to October 25, 2021. An authenticated attacker can achieve remote code execution, then escape the sandboxed environment to access internal Zepl assets, including cloud metadata services. With a CVSS score of 9.9, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.