Research presented at DEF CON 34 by Cyera researchers Vladimir Tokarev and Saar Pearl found that seven products using Pyodide relied on Python-level restrictions that did not fully isolate untrusted code from the underlying host environment. Key takeaways of the Cyera researchResearchers identified Pyodide sandbox escapes across seven products , finding that Python-level restrictions did not fully isolate untrusted code from the underlying host environment. AdvertisementSeven products affected by Pyodide sandbox vulnerabilitiesThe researchers reproduced related sandbox escapes across workflow automation, spreadsheets, AI-agent runtimes, desktop applications, and continuous integration and continuous delivery (CI/CD) tooling. How host runtimes increase Pyodide sandbox security risksEscaping Pyodide was only part of the security equation. Restrict filesystem and host access with read-only mounts, minimal host permissions, and access only to resources required by the workload.