Exploit discussion active in current signal (3 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
CVE-2026-40959 Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod. https://www.cve.org/CVERecord?id=CVE-2026-40959
Post summary
CVE-2026-40959 was disclosed for Luanti 5 before 5.15.2, where LuaJIT enables a sandbox escape through a crafted module. No PoC, exploit, or patch details are mentioned.
CVE-2026-40959 Lua Sandbox Escape in Luanti 5 Before 5.15.2 With LuaJIT https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40959 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The post announces a Lua sandbox escape vulnerability in Luanti 5 (before 5.15.2) with LuaJIT, providing basic technical details but no exploit or mitigation information.
🚨 CVE-2026-40959: Luanti (CVSS: 9.3)... LuaJIT sandbox breaks let malicious mods execute arbitrary code outside the game engine - turn your Minecraft clone int... https://zerodaysignal.com/vulnerability/CVE-2026-40959 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
A high‑severity vulnerability (CVE‑2026‑40959) in LuaJIT is disclosed, detailing how the sandbox flaw permits arbitrary code execution via malicious mods, with a link to an external vulnerability report.