isolated-vm Escape: Type Confusion in Glue Code Hijacks the Host
A type confusion in isolated-vm's C++ glue code lets untrusted code running inside a V8 Isolate corrupt host memory. Endor Labs escalated from a single ivm.Reference to full control-flow hijacking, a genuine guest-to-host sandbox escape. Notably, the V8 boundary held; the value-marshaling layer failed. With embedded AI agents like n8n, Activepieces, and Mastra on 1M+ weekly downloads, the 6.2.0/7.0.1 patches deserve an urgent rollout.