Critical · 9.3 CVE-2026-5752 EUVD-2026-22676GHSA-cmpr-pw8g-6q6c

CVE-2026-5752

Published Apr 14, 2026 · Updated Apr 23, 2026 · Assigned by certcc

Vendor: Cohere Product: cohere-terrarium

Description

Sandbox Escape Vulnerability in Terrarium allows arbitrary code execution with root privileges on a host process via JavaScript prototype chain traversal.

Affected products

Vendor	Product	Affected	Fixed
Cohere	cohere-terrarium	1.0.1	—

References

https://kb.cert.org/vuls/id/414811
https://github.com/cohere-ai/cohere-terrarium