Critical isolated-vm flaw allows JavaScript sandbox escape and host process takeover

·3 views

A high-severity type confusion vulnerability has been disclosed in isolated-vm, a popular Node.js library used to run untrusted JavaScript in sandboxed environments. The flaw allows malicious guest code to exploit a double-read inconsistency in the ExternalCopy constructor's transferList getter, tricking C++ bindings into mishandling memory and hijacking the host process's control flow. Affected versions include isolated-vm 7.0.0 and below, as well as 6.x releases prior to 6.2.0, with platforms such as n8n, Activepieces, and Mastra AI among potentially impacted products. Successful exploitation can result in arbitrary code execution with host-level privileges, credential exposure, and full breakdown of the guest-host isolation boundary. Users are advised to upgrade to version 7.0.1 or 6.2.0 immediately, and to avoid passing ivm.Reference objects to untrusted code as a mitigation measure.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer argues modern software has no excuse for poor performance

A software engineer has published a post on danluu.com arguing that there is no longer any justification for slow software in the modern era. The piece contends that available tools, hardware, and optimization techniques make high performance achievable for most applications. The article has sparked discussion on Hacker News, where developers are debating the claim. The post challenges the industry norm of accepting sluggish software as inevitable.

0 comments Read more at Hacker News

ProgrammingHacker News ·

GrapheneOS Partners with Motorola, Starting with a Standard Non-Folding Device

GrapheneOS has announced a new hardware partnership with Motorola. The privacy-focused mobile operating system will initially target a conventional, non-folding Motorola smartphone. This marks a notable expansion for GrapheneOS, which has historically centered its support around Google Pixel devices. No specific device model or release timeline has been publicly confirmed yet. The announcement was made via the official GrapheneOS Mastodon account.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

How One Course Team Spent Weeks Training Their AI Helper to Admit It Doesn't Know

An online course platform integrated an AI assistant to answer student questions, finding the initial build took only a weekend to set up. Problems emerged quickly when the AI confidently fabricated a nonexistent feature in response to a question outside its training material. The team spent weeks refining three core challenges: limiting the AI's knowledge scope to authoritative sources only, training it to refuse out-of-scope questions rather than guess, and routing students to human support when needed. They built a structured test suite of out-of-scope and near-miss questions to catch regressions every time the prompt or source material changed. Key lessons included explicitly defining the AI's scope in the system prompt, tagging sources by authority level, and providing a concrete refusal template rather than vague instructions to avoid hallucination.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AgnosticBrain adds a protected layer to stop AI from overwriting your manual edits

A knowledge management project called agnosticBrain has introduced a three-layer ownership system to address a blind spot in Andrej Karpathy's LLM Wiki pattern, which Karpathy published in April 2026. The original pattern splits a personal knowledge vault into raw sources (read-only for the LLM) and a wiki directory (fully maintained by the LLM), but assumes the human never edits the wiki directly. In practice, users do refine AI-generated notes by hand, and subsequent LLM ingests can silently overwrite those edits. AgnosticBrain solves this by adding a third directory called curated/, where manually refined notes are stored and treated as strictly off-limits for any AI agent or automated operation. Users move a note into curated/ via a /curate command, permanently protecting its contents from being altered during ingests or any other pipeline task.

0 comments Read more at DEV Community