CVE-2026-93985 Details

A sandbox escape vulnerability has been identified in OpenPanel js-runtime versions through bad75bdd. This vulnerability resides in the JavaScript webhook template validator, which inadequately restricts computed member access to constructor chains. As a result, attackers with project write access can craft webhook templates that exploit this oversight, allowing access to the Function constructor and the execution of arbitrary code within the worker process.

To address this vulnerability, it is recommended to enhance the validation process for computed member accesses, particularly those involving constructors. Webhook templates should be re-validated before execution to ensure they do not contain unsafe code. Additionally, consider using a more secure method for executing tenant code that does not involve the host 'Function' constructor.