Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment. The vulnerability ("GHSA-864f-rcv7-6rh4"), which has yet to be assigned a CVE identifier, impacts all versions of the library before and including 7.0.0.

Reported facts: Researchers disclosed a critical vulnerability (GHSA-864f-rcv7-6rh4) in the isolated-vm JavaScript sandbox library that allows code to escape the isolated environment, affecting all versions up to and including 7.0.0 and potentially enabling remote code execution on the host. The flaw is in a widely used open-source component that has not yet been assigned a CVE ID. RealGround analysis: Because many AI agents and LLM-powered services embed and execute untrusted or semi-trusted JavaScript using sandboxing libraries, a breakout from isolated-vm represents an AI supply chain and execution-environment risk—AI systems that rely on this library could have their host compromised via malicious tool or plugin code. Organizations should update their SBOMs, identify any AI workloads using isolated-vm, and prioritize patching or mitigation, alongside hardening host environments and conducting security readiness reviews focused on sandbox escape impacts.