CVE-2024-34346

CVE-2024-34346 describes a critical vulnerability in Deno, a JavaScript, TypeScript, and WebAssembly runtime, where its sandbox can be unexpectedly weakened. This allows an attacker with existing read/write access to the filesystem to gain elevated privileges by interacting with specific sensitive files on Unix and Windows platforms, effectively bypassing intended security controls. The vulnerability carries a CVSS score of 9.0 (CRITICAL) due to its low attack complexity, requiring only adjacent network access and low privileges, but leading to high confidentiality, integrity, and availability impacts. While the vulnerability is critical, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.