CVE-2026-120338 - Prefab UI Pyodide sandbox escape to host RCE
CVE ID :CVE-2026-120338 Published : Nov. 1, 2026, 3:24 p.m. | 37 minutes ago Description :Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including...