A critical sandbox escape vulnerability in Cohere Terrarium permits unauthenticated attackers to achieve arbitrary code execution with root-level privileges.

The software suffers from improper control of code generation and access control (CWE-94, CWE-284). By leveraging JavaScript prototype chain traversal, an attacker can bypass sandbox restrictions to execute commands with root privileges on the underlying host.

With a CVSS score of 9.3, this vulnerability represents a total compromise of the host environment. An attacker achieving root access can bypass all internal security controls, access sensitive data, or pivot into the broader network, resulting in severe operational and reputational damage.

Immediate Action: Review the official project repository for security updates and apply them immediately; if no update is available, restrict access to the Terrarium service to trusted internal networks only.

Proactive Monitoring: Monitor host process logs for suspicious spawned processes or unauthorized modifications to system files originating from the Terrarium service.

Compensating Controls: Implement strict containerization or hardware-level isolation to limit the blast radius if the sandbox is breached.

Public Exploit Available: Unknown.

This vulnerability represents a significant risk to host integrity. Administrators should prioritize upgrading the affected software and ensure that the service is not exposed to the public internet until a security patch is verified and applied.