Dispatch
FF Sandbox Escape: a 2020 Firefox CVE with a 2026 echo for AI platforms
Project Zero’s FF Sandbox Escape (CVE-2020-12388) and the 2026 Sol incident share a lesson: sandbox walls can fail while network paths stay reachable.
#FFSandboxEscape #CVE202012388 #SandboxEscape #GoogleProjectZero #EgressControl
Vantio Newsroom
Vantio AI, Inc.
Google Project Zero's FF Sandbox Escape write-up documents CVE-2020-12388, a 2020 Firefox sandbox escape on Windows: source. The OpenAI Sol incident at Hugging Face is a separate 2026 event, but it repeats the same lesson: sandbox walls can fail while network paths stay reachable. Both stories highlight the importance of robust security measures — and real egress control — for AI platforms.