Critical flaw patched in popular JavaScript sandbox used in AI projects
Summary
A critical vulnerability was discovered in isolated-vm, a widely-used library that runs untrusted JavaScript code safely by isolating it in a separate process. The flaw, called a type confusion (a bug where the program treats one type of data as another type), was in the C++ binding code connecting the library to V8, the JavaScript engine, and could allow attackers to escape the sandbox and run their own code on the host system. The vulnerability affected popular AI automation projects like n8n, Sim.ai, Mastra, and Activepieces.
Solution / Mitigation
The isolated-vm developers patched the vulnerability in versions 7.0.1 and 6.2.0, released earlier in the month.
Classification
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2024-37052: Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling
Original source: https://www.csoonline.com/article/4212151/critical-flaw-patched-in-popular-javascript-sandbox-used-in-ai-projects.html
First tracked: August 20, 2026 at 08:01 PM
Classified by LLM (prompt v3) · confidence: 85%