严重
漏洞预警
CVSS 10.0
CVE-2026-120338：Prefab UI's Generative UI sandbox runs caller-supplied Python inside P
Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. Fro…