SandboxJS, prior to version 0.9.6, allowed sandbox‑defined functions to expose the native Function.caller property. Through this leakage an attacker‑supplied sandbox script could retrieve the internal LispType.Call runtime callback, invoke it with fabricated context and obj parameters, extract blocked host statics, recover the real host Function constructor, and ultimately execute arbitrary host JavaScript. This flaw is a code injection vulnerability (CWE‑94) and is listed with a CVSS score of 10, indicating a full compromise of confidentiality, integrity, and availability of the host environment.

The issue affects the nyariv SandboxJS library in all releases before 0.9.6. No other vendors or product versions are enumerated in the CVE data. Applications that embed SandboxJS 0.9.5 or earlier are vulnerable.

The vulnerability carries the maximum severity rating, underscoring the potential for complete host code takeover. The EPSS score is unavailable, but the flaw is not yet listed in the CISA KEV catalog. Based on the description, it is inferred that the likely attack vector involves an attacker who can submit or create sandbox‑defined functions, such as through user‑supplied script input. Once the internal call operation is accessed, the attacker can achieve arbitrary code execution on the host platform.