
The Illusion of Isolated Execution A security sandbox is meant to function as a digital high-security wing where untrusted code remains trapped, yet a single oversight in the JavaScript prototype chain has turned Cohere AI’s Terrarium into a wide-open gateway rather than a reinforced cage. With a staggering CVSS score of 9.3, the vulnerability identified as CVE-2026-5752 demonstrates that the










