Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
- Posted on August 20, 2026
- By The Hacker News
- 0 Views
- 1 min read
In brief
Generating AI summary…
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are in 6.2.0 and 7.0.1.
