Goal Reached Thanks to every supporter β€” we hit 100%!

Goal: 1000 CNY Β· Raised: 1000 CNY

100.0%

CVE-2026-25641 β€” AI Deep Analysis Summary

CVSS 10.0 Β· Critical

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: SandboxJS < 0.8.29 has a critical flaw where the key used for validation doesn't match the key used for property access.…

Q2Root Cause? (CWE/Flaw)

πŸ›‘οΈ **Root Cause**: **CWE-367** (Time-of-check Time-of-use / TOCTOU). The logic flaw lies in the `executor.ts` file.…

Q3Who is affected? (Versions/Components)

πŸ‘₯ **Affected**: Users running **SandboxJS** by developer **nyariv**. Specifically, versions **0.8.29 and earlier**. If you are using this security assessment tool for evaluation, you are at risk. ⚠️

Q4What can hackers do? (Privileges/Data)

πŸ’€ **Attacker Capabilities**: With **CVSS 3.1 High** (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H), hackers can: 1. **Escape the sandbox** completely. 2. Access **Confidential Data** (C:H). 3. **Modify** system state (I:H). 4.…

Q5Is exploitation threshold high? (Auth/Config)

πŸ”“ **Exploitation Threshold**: **LOW**. The vector is Network (AV:N), Attack Complexity is Low (AC:L), and no Privileges (PR:N) or User Interaction (UI:N) are required.…

Q6Is there a public Exp? (PoC/Wild Exploitation)

πŸ“‚ **Public Exploit**: Currently, the `pocs` list is empty in the data. However, the GitHub Advisory (GHSA-7x3h-rm86-3342) and source code link are public.…

Q7How to self-check? (Features/Scanning)

πŸ” **Self-Check**: 1. Check your SandboxJS version. Is it < 0.8.29? 2. Review `src/executor.ts` around line 304 for the key mismatch logic. 3. Use static analysis tools to detect CWE-367 patterns in JS execution engines.…

Q8Is it fixed officially? (Patch/Mitigation)

βœ… **Official Fix**: **YES**. The vulnerability is fixed in the commit `67cb186c41c78c51464f70405504e8ef0a6e43c3`. Update to version **0.8.29 or later** immediately to patch this hole. 🩹

Q9What if no patch? (Workaround)

πŸ›‘ **No Patch Workaround**: If you cannot update, **disable** the vulnerable execution features or isolate the SandboxJS instance in a highly restricted network segment.…

Q10Is it urgent? (Priority Suggestion)

πŸ”₯ **Urgency**: **CRITICAL**. With a High CVSS score, no auth required, and network accessibility, this is a **Priority 1** issue. Patch immediately to prevent potential sandbox escapes and data breaches. Do not ignore! ⏳