CVE-2026-93985

Received Received - Intake

OpenPanel js-runtime Sandbox Escape via Constructor Chain Access

Publication date: 2026-09-19

Last updated on: 2026-09-19

Assigner: VulnCheck

Description

OpenPanel js-runtime through commit bad75bdd contains a sandbox escape vulnerability in the JavaScript webhook template validator that fails to block computed member access to constructor chains. Attackers with project write access can create webhook templates using computed property notation to access Function constructor and execute arbitrary code in the worker process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-19

Last Modified

2026-09-19

Generated

2026-09-20

AI Q&A

2026-09-20

EPSS Evaluated

N/A

NVD

CVE-2026-93985

Affected Vendors & Products

Vendor	Product	Version / Range
openpanel	js-runtime	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Executive Summary

OpenPanel js-runtime has a sandbox escape flaw in its JavaScript webhook template validator. The validator fails to block computed member access to constructor chains, allowing attackers with project write access to use computed property notation to access the Function constructor and execute arbitrary code in the worker process.

Impact Analysis

If exploited, this vulnerability could allow attackers to run malicious code on your system, potentially leading to data theft, system compromise, or unauthorized actions. Attackers need project write access to trigger it.

Compliance Impact

This vulnerability could lead to unauthorized code execution, potentially causing data breaches. Such breaches may violate GDPR (data protection) or HIPAA (health data security), resulting in legal penalties, fines, or reputational damage.

Mitigation Strategies

Update OpenPanel js-runtime to a version that patches the sandbox escape vulnerability in the JavaScript webhook template validator. Restrict project write access to prevent unauthorized template creation.

Hi! I’m here to help you understand CVE-2026-93985. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70