Judge0 Security Flaw Let Attackers Run Arbitrary Code & Gain Root Access

Tanto Security has disclosed critical vulnerabilities in the widely-used open-source service Judge0, which could allow attackers to perform a sandbox escape and gain root access to the host machine. The vulnerabilities, identified as CVE-2024-29021, CVE-2024-28185, and CVE-2024-28189, pose a significant threat to the security of the service, which numerous organizations employ for secure sandboxed code […]

The post Judge0 Security Flaw Let Attackers Run Arbitrary Code & Gain Root Access appeared first on Cyber Security News.

access arbitrary code attackers code critical critical vulnerabilities cve cve-2024 cyber-attack cyber security escape flaw host judge0 machine root root access run sandbox sandbox escape security security flaw service threat vulnerabilities vulnerability