PT-2026-80245

Summary A guest mruby script running inside the Kobako sandbox can execute arbitrary Ruby in the host process, fully escaping the sandbox. Details A host embeds bound "Service" objects that guest scripts call across the wasm boundary through the transport dispatcher. The dispatcher passed the...

PT-2026-80759

Name of the Vulnerable Software and Affected Versions Kobako versions 0.1.0 through 0.9.0 Description A guest mruby script running inside the Kobako sandbox can execute arbitrary Ruby code in the host process, resulting in a complete sandbox escape. The issue occurs because the transport dispatch...