Host takeovers likely with critical Judge0 flaws

SecurityWeek reports that online open-source service Judge0 used for arbitrary code execution within a sandbox has been impacted by three critical vulnerabilities, which could be leveraged to facilitate sandbox escapes, privilege escalation, and system takeovers.

arbitrary code arbitrary code execution cloud security code code execution critical critical vulnerabilities escalation flaws host judge0 network security privilege privilege escalation reports sandbox service system takeovers third-party-code vulnerabilities