CVE-2026-5752

CVE-2026-5752 is a sandbox escape vulnerability in Terrarium that enables attackers to execute arbitrary code with root-level privileges on host processes through JavaScript prototype chain traversal. This critical flaw bypasses the application's security boundaries, potentially allowing complete system compromise. The vulnerability carries a CVSS severity score of 9.3 (Critical) with a local attack vector requiring no user interaction or special privileges. Exploitation requires local system access, but once achieved, attackers gain high-impact capabilities across confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation in the wild, as the vulnerability does not appear on CISA's Known Exploited Vulnerabilities list, and community attention remains relatively low based on available threat intelligence metrics.