CVE-2026-34156

This exploit demonstrates a VM sandbox escape in NocoBase 2.0.27 by leveraging prototype chain traversal to access host-realm objects, bypassing the sandbox, and achieving remote code execution. It includes authentication, vulnerability verification, and payload execution for command injection or reverse shell.

This repository contains a functional exploit for CVE-2026-34156, which leverages a sandbox escape in NocoBase's Workflow Script Node via prototype chain traversal on the `console._stdout` object to achieve remote code execution (RCE) as root. The exploit includes a Python script that authenticates, constructs a malicious payload, and executes arbitrary commands on the target system.

This repository contains a functional Python exploit for CVE-2026-34156, which leverages a sandbox escape in NocoBase's workflow engine to achieve remote code execution. The exploit uses a crafted JavaScript payload to bypass the VM sandbox and execute arbitrary commands via the `child_process` module.

This repository contains a functional exploit for CVE-2026-34156, which leverages a sandbox escape in NocoBase's Workflow Script Node via prototype chain traversal on the `console._stdout` object to achieve remote code execution (RCE) as root.

This repository contains a functional Python exploit for CVE-2026-34156, which leverages a sandbox escape in NocoBase's Workflow Script Node to achieve remote code execution as root. The exploit uses a classic prototype chain traversal technique to escape the Node.js vm sandbox and execute arbitrary commands.